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foreword 





This quarterly journal is a Technical Progress Review prepared by the Oak Ridge 
National Laboratory at the request of the Office of Technical Information, U. S. Atomic 
Energy Commission. This Review is intended to assist those interested in keeping 
abreast of significant developments in the field of nuclear safety. Nuclear Safety is nota 
comprehensive abstract of all literature published in this field during a given quarter; 
rather it is a mechanism for presenting concise reviews of selected subjects as prevail- 
ing interest and available information warrant. 

Coverage of the Review is limited to topics relevant to the analysis and control of 
hazards associated with nuclear reactors, operations involving fissionable materials, 
and the products of nuclear fission. Primary emphasis is on safety in reactor design, 
construction, and operation; however, safety considerations in reactor fuel fabrication, 
spent-fuel processing, nuclear waste disposal, and related operations are also treated. 
Safety in the use of radioisotopes in industry, medicine, and research is excluded, as are 
most topics considered to be in the province of health physics. Even with these exclusions, 
nuclear safety overlaps such diverse fields as nuclear physics, solid-state physics, me- 
chanics, chemistry, meteorology, geology, seismology, metallurgy, law, and nearly all 
branches of engineering. The authors will therefore review material from these fields 
which, in their opinion, has a direct bearing on nuclear safety. 

Three distinctly different types of articles are in this issue of Nuclear Safety: re- 
views of current literature, special review articles on specific topics, and comparative 
studies of various aspects of U. S. power reactors. The editors feel that each of these 
articles makes a necessary and distinctive contribution to this journal. The special re- 
view articles permit discussion of pertinent subjects which cannot be adequately con- 
sidered by reference to only the current literature. The comparative studies direct 
attention to acceptable practice in the U. S. power reactor industry. The current review 
articles, however, constitute the major portion of this issue. 

All incoming literature (including reports, books, American and foreign technical 
journals, and transactions) is examined for subjects within our area of interest. This 
material is collected, grouped, and reviewed by experts. Interpretations, in any article, 
represent the opinions of the editors, who are employed by the Oak Ridge National Labo- 
ratory. Readers are urged to consult the references to original work for more complete 
information. 

In addition to the invited contributions, many members of the Oak Ridge National 
Laboratory staff wrote review material, reviewed manuscripts, or otherwise contributed 
to this publication. Their contributions are gratefully acknowledged. 


W. B. COTTRELL, Editor; R. A. CHARPIE, Advisory Editor 

C. G. BELL, H. N. CULVER,* D. G. JACOBS, L. A. MANN, 

A. W. SAVOLAINEN, T. TAMURA, and C. S. WALKER, 
Assistant Editors 

Oak Ridge National Laboratory 





*On loan from the Tennessee Valley Authority. 
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Reactor Inspectior 


By PETER A. MORRIS* 


Until Aug. 1, 1960, inspection of licensed reac- 
tors, and those being built under a construction 
permit, was carried out by the U.S. Atomic 
Energy Commission (AEC) Division of Inspec- 
tion. This Division, which was created specifi- 
cally by the Atomic Energy Act of 1954,' is 
charged with “gathering information to show 
whether or not the contractors, licensees, and 
officers and employees of the Commission are 
complying with the provisions of this Act (ex- 
cept those provisions for which the Federal 
Bureau of Investigation is responsible) and the 
appropriate rules and regulations of the Com- 
mission.’’?»3 On Aug. 1, 1960, the responsibility 
for inspection of licensed reactors, and those 
with construction permits, was transferred to 
the newly formed Division of Compliance.” At 
the present time, the Division of Compliance 
carries out the actual field inspections of li- 
censed facilities, and the Division of Inspection 
retains its over-all responsibility for ascertain- 
ing that adequate inspection activities are being 


*Dr. Peter A. Morris, Assistant Director for Re- 
actors, Division of Compliance, AEC, was associated 
With the AEC Headquarters Division of Inspection from 
October 1957 to July 1960. From 1951 until 1957, Dr. 
Morris was employed by E. I. du Pont de Nemours & 
Co,, Inc., at the Argonne National Laboratory, at the 
Du Pont home office in Wilmington, Del., and at the 
Savannah River Laboratory. From 1946 to 1948, he 
was with the Bartol Research Foundation, He received 
the B.A. degree in mathematics from Swarthmore Col- 
lege in 1943 and the Ph. D.degree in physics from the 
University of Virginia in 1951. He served in the U. S. 
Air Force from 1943 to 1946. Dr. Morris is amember 
of Sigma Xi and Phi Beta Kappa honorary societies 
and of the American Nuclear Society. 


carried out for licensed reactors, as well as 
for AEC-owned and contractor-operated reac- 
tors. 

Both the Division of Licensing and Regulation 
and the Division of Compliance report to the 
Assistant General Manager for Regulation and 
Safety.?- These Divisions, with the advice of 
the Advisory Committee on Reactor Safeguards 
(ACRS), carry out the AEC’s responsibility for 
protection of the health and safety of the public 
with regard to the operation of licensed nuclear 
reactors.'*3 


Organization for Inspection 


The Division of Compliance, established Nov. 
13, 1959, was staffed originally on June 13, 1960, 
and acquired personnel for reactor inspection 
work on Aug. 1, 1960. Within the Division of 
Compliance are a Materials Inspection Branch 
and a Reactor Inspection Branch. Responsi- 
bility for inspection of the facilities of the ap- 
proximately 10,000 materials-license holders 
(source, by-product, and special nuclear ma- 
terials) has been delegated to eight of the 
Commission’s field offices. Responsibility for 
inspection of privately owned reactor facilities 
(approximately 50 operating; another 40 under 
construction or planned) remains with the head- 
quarters staff. The Assistant Director for Re- 
actors, Division of Compliance, and three in- 
spection specialists, who are located at field 
offices, directly inspect all facilities operating 
under license or being built under a construc- 
tion permit. Occasionally, technical consultants 
also assist in inspections. The inspectors work 
closely with the Division of Licensing and 
Regulation to achieve effective communication 
of field findings. Formal recommendations of 
the Division are made to the Assistant General 
Manager for Regulation and Safety of the AEC, 
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and enforcement or other action is taken through 
the Division of Licensing and Regulation. 


Inspection Policy 


The policy for the reactor inspection program 
has been and is to use inspectors who have had 
extensive experience in both the design and 
operation of reactors. The emphasis has been 
to concentrate the efforts and attention of these 
men on those aspects of reactor design and 
operation which are related to the health and 
safety of the public. The Division of Compliance 
does not conduct the more or less conventional 
types of inspection, such as inspection for 
compliance with electrical codes, pressure- 
vessel codes, and building codes. The tech- 
niques and bases for these inspections have 
been established and agreed upon by national 
organizations of considerable stature, and there- 
fore the Division of Compliance participates 
only to the extent of assuring itself that such 
inspections are made responsibly and inde- 
pendently by specified persons or groups. The 
features and equipment peculiar to nuclear re- 
actors, however, and directly related to safety 
of operation may be inspected in detail; the 
items might include a new control-system de- 
sign, initial pressure test of a containment 
vessel, or calibration of certain instrumenta- 
tion, for example. 


Safety of nuclear facilities is the responsi- 
bility of licensee management, and this basic 
responsibility cannot be delegated. For this 
reason, in so far as practicable, initial contacts 
by reactor inspectors are made with manage- 
ment personnel to explain and describe the 
functions, responsibilities, and authority of the 
Division of Compliance. At the conclusion of 
all visits, it is also desired that management 
be informed of the findings and conclusions of 
the inspector, recognizing that these are sub- 
ject to review within the Commission. It also 
follows, for privately owned reactors, that 
basic responsibility of licensee management 
for safe reactor operation cannot be shared by 
the Division of Compliance or others in the 
AEC. 


Because of the unique opportunities of the 
inspectors to visit many facilities and thus to 
become acquainted with a broad range of operat- 
ing experience, an obligation is felt to dissemi- 
nate information and to review experiences as 
much as possible, with due regard for pro- 


prietary information and unambiguous identifi- 
cation of personal opinions and predilections. 

The Division of Compliance does not inspect 
Commission-owned reactors. Responsibility for 
inspection of such reactors is that of the 
managers of the operations offices having juris- 
diction over them.’ The Division of Inspection 
does have responsibility, however, as stated in 
the Act,! to gather information to show whether 
the managers and contractors are carrying out 
their respective responsibilities. 


Methods 


The scope and methods of reactor inspection 
vary widely, depending on the type of reactor, 
the state of construction or operation, the ex- 
perience and ability of the operator, etc. Fora 
reasonably large reactor, or a reactor of new 
design, the inspection function involves the fol- 
lowing phases: 


1. Familiarization of inspection personnel 
with the facility during design review and haz- 
ards evaluation activities. 

2. Observation and review of construction 
progress. 

3. Observation and review of equipment and 
procedures before nuclear operation. 

4. Observation and review of the initial load- 
ing of fuel, initial reactor startup, and opera- 
tional program. 

5. Periodic observation and review during 
normal operation. 


Inspection activities may include visual in- 
spections; observation of acceptance or per- 
formance tests; observation of simulated or 
actual operation; review of organization, ad- 
ministrative, and operating procedures; revieW 
of operating records, logs, and reports; and 
discussion with operating, technical, and mana- 
gerial personnel. The frequency of inspection 
visits varies widely. Routine visits to an “off- 
the-shelf’’ training reactor may be spaced a 
year or more apart. Visits to a power reactor 
during the final acceptance testing preceding 
initial nuclear operation may be as frequent as 
several days per week. 


Experience 


Inspection experience has been generally 
favorable in that no gross violations of the rules 
and regulations have appeared and no cases of 
complete inadequacy of equipment, procedures, 











or | 
hav 
cou! 


clea 
pro} 
with 
star 
bee! 
seal 
In t 
the 

quir 
ficie 


and 
ope! 
men 
fiel 


Det: 


and 
Ato. 
Bra 
are 


mn 


=n. 


= a2< 
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or people have been found. A number of cases 
have been noted in which operational safety 
could have been, and was, improved distinctly 
by relatively minor changes or additions. (A 
clear-cut example of this type of situation is 
proper location of neutron source and detector 
with respect to the core during loading and 
startup operations.) In several cases it has 
been found that the owners of training or re- 
search reactors were relatively inexperienced. 
In these cases the presence of consultants or 
the reactor manufacturer’s personnel was re- 
quired until the owner acquired adequate pro- 
ficiency. 

Because of the preliminary status of standards 
and codes in the reactor field, any appraisal of 
operational safety necessarily involves judg- 
ment on the part of the appraiser. As in other 
fields, the degree of conservatism in the reactor 
business appears to be a function of experience. 
In inexperienced groups there have sometimes 
been strong pressures, because of scientific 
enthusiasm and business competition, opposing 
a prudent regard for sound safety practices. 
Experienced groups have learned that any com- 
promises of conservative safety attitudes or 
practices in reactor operation invariably lead 
to malfunction or mishap. 


Inspections in Other Countries 


Implementation of regulatory requirements 
for reactors appears to be further advanced in 
the United States than in any other country. The 
Canadian Atomic Energy Control Act‘ permits 
the Atomic Energy Control Board to make regu- 
lations, including those regarding the licensing 
of facilities and the use of atomic energy. Al- 
though such regulations are in the process of 
revision, it is understood that inspection of 
Canada’s reactors will be done, on an informal 
basis only, by members or representatives of 
the Board, at least until the number of reactors 
in Canada becomes large enough to justify a 
full-time inspection activity. 

In Japan, licensed reactors are allowed to be 
put into operation only after inspection and ex- 
amination, by direction of the Prime Minister.® 
Details of this mechanism are not available. 

In England, government reactors are reviewed 
and inspected by the Safeguards Division of the 
Atomic Energy Authority Health and Safety 
Branch.® In the future, nongovernment reactors 
are to be licensed and inspected by the Ministry 


of Power. This program is currently being 
formulated. 

Information is not available at present con- 
cerning inspection activities in Russia or 
France. 


Future AEC Inspection 


The Division of Compliance exercises the 
direct inspection function of the AEC for li- 
censed reactors.” Eventually, responsibility for 
inspection of certain classes of reactors, or 
specific reactors, will be delegated to some of 
the operations offices, under the guidance of 
policies and procedures developed by the Head- 
quarters Division. “(Peter A. Morris) 


Shipment of Spent Fuel Elements 


Processing of spent fuel from power reac- 
tors will generally involve the transportation 
of a considerable tonnage of radioactive ma- 
terial over hundreds of miles. For the present, 
the processing will be done in government- 
owned plants.’ Later, as the number of reac- 
tors increases, it is expected that privately 
owned processing plants will be built. The lo- 
cations of the government plants and the power 
reactors they are now expected to serve’ are 
shown in Fig. 1. The fuel-processing site has 
not yet been designated for a number of the 
proposed power reactors. 

Irradiated fuel is transported in heavily 
shielded containers called casks. From a haz- 
ards standpoint, a loaded spent-fuel cask is in 
some respects like a portable nuclear reactor, 
and important safety requirements in handling 
casks are therefore the prevention of criticality, 
provision for adequate heat removal, adherence | 
to structural integrity, etc. If the fuel in the 
shipping cask should “go critical,’’ the cask 
would become, at the very least, a hazardous 
source of neutrons and radioactive materials. 
If a criticality incident resulted from a wreck 
that also caused a rupture of the cask, the inci- 
dent could lead to dangerous dispersal of fis- 
sion products. Rupture or meltdown of a spent 
fuel element during transport could also lead to 
the release of radioactive particulate matter 
and volatile fission products. Thus an inade- 
quately designed or handled cask would be a 
hazard to anyone in its vicinity. 

In order to preclude or minimize the haz- 
ards, the AEC is preparing regulations govern- 
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Figure 1— Map showing locations of government-owned fuel-processing plants and the power reac- 


tors the plants will serve. 


ing the shipment of irradiated solid fuel ele- 
ments. A proposed set of regulations has been 
published® for comment by interested persons 
and organizations. On the assumption that the 
revisions based on the comments will be minor, 
it is believed that a discussion of the regula- 
tions in their present form, with emphasis on 
the apparent intent rather than on the precise 
wording used, is timely. 

The regulations apply only to the shipment of 
solid fuel elements. Presumably, regulations 
relative to the shipment of liquid fuels will be 
issued when the need arises. 

The regulations state that a license to trans- 
port fuel must be obtained from the AEC. Is- 
suance of a license is considered on the basis 
of information submitted by the applicant, in- 
cluding engineering analyses of criticality, heat 
transfer, radiation shielding, structural integ- 
rity, control of contamination of shipping casks, 
and the handling procedures to be employed. 

In addition to the regulations governing ship- 
ment, general criteria for acceptance of casks 
by the processing plants have been formulated 
for the guidance of shippers.'® Also, the indi- 
vidual processing plants have prepared their 
own acceptance criteria.!'~'° It should be 


pointed out that these criteria are generally for 
routine operations, and, as such, there wouldbe 
no additional charges. Special handling of casks 
(if they can be handled safely) would be possibly 
approved, provided the shipper pays for all 
additional costs. 


Criticality Control 


The shipper may employ either mass control 
or geometry control to prevent criticality. If 
mass control is employed, no more than 75 per 
cent of a critical mass may be placed in a single 
cask. In determining critical mass, credit may 
be taken for poisons built into the cask or fuel 
elements. In all other respects, however, the 
worst credible set of conditions must be as- 
sumed. Fuel must be taken at its maximum 
reactivity; i.e., it must be treated as unirra- 
diated fuel or, if it contains built-in poisons, 
as fuel irradiated to the point of greatest re- 
activity. The presence of the amount of hy- 
drogenous material giving maximum reactivity 
must be assumed. Similarly, it must be as- 
sumed that the spacing between fuel elements 
is that which gives maximum reactivity, or it 
must be shown that the fuel elements cannot be 
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arranged into a configuration more reactive 
than that for which the shipment is designed. 
Unless it can be established that meltdown of 
the fuel elements is impossible, the fuel must 


be considered as melted fuel in the most reac- 
tive array. Where geometry control is em- 
ployed, each controlling dimension must in- 
corporate an allowance for defined uncertainties 
in experiment or calculation and, in addition, a 
10 per cent safety factor. 


The applicant for a license must demonstrate 
that shipments involving more than one cask 
will be safe from criticality based on inter- 
actions between casks. In the present form of 
the proposed regulations, no provision is made 
regarding the possibility of interaction between 
casks from different shippers that might pass 
near one another, as could easily occur at or 
near a processing site. This situation has been 
called to the Commission’s attention’! by the 
Chairman of ANS Standards Project 8. 


Heat Removal 


The use of either a liquid or a gaseous cool- 
ant is permitted by the regulations. However, 
the use of liquids other than water is generally 
not acceptable to the processing plants when 
such liquids could contaminate storage-basin 
water.’ It is likely that water will be used al- 
most universally as the coolant, since it is 
planned that the loading of spent fuel into casks 
will be carried out under water at all U.S. 
power-reactor stations. For a spent-fuel load 
that liberates very little heat, it may be neces- 
Sary to use an antifreeze in water. In that 
event, special arrangements would have to be 
made with the processing plant. If a liquid 
coolant is used, its maximum temperature must 
be restricted to 20°F below its boiling point at 
the highest elevation on the route. The tem- 
perature of the accessible surfaces of the cask 
must be limited to 180°F. 


Coolant that is in contact with the fuel may 
not be circulated outside the cask shielding. A 
Secondary coolant is required if heat sinks in 
the form of radiators separate from the cask 
are to be used. This requirement, together 
with another which states that the cooling sys- 
tem shall operate at approximately atmospheric 
Pressure, probably will have the effect of limit- 
ing the use of gaseous coolants to casks holding 
Smail amounts of fuel irradiated to a low level. 


Piper and Langhaar’® have described the de- 
sign and construction of a 170-ton spent-fuel 
cask having a finned surface for dissipation of 
heat. The finned surface provides an excellent 
solution to the heat-dissipation problem. For 
highly irradiated fuels, however, its use is 
limited to loads of the order of 1 ton or less of 
uranium. This load limit varies widely, of 
course, depending on irradiation conditions, 
cooling time, and shape and size of the cask. 


An important part of the regulations pertain- 
ing to heat removal concerns the possible loss 
of coolant. The regulations acknowledge the 
inability to preclude the possibility of the loss 
of coolant, and they establish criteria intended 
to minimize the damage that might result. The 
proposed regulation appears to require that, in 
the event coolant is lost, no constituent in the 
cask, including fuel, cladding, and built-in poi- 
son, will reach a temperature greater than 
180° F below its melting point. Compliance with 
this regulation would prevent criticality inci- 
dents that might otherwise occur if, for ex- 
ample, poison-containing spacers or fuel clad- 
ding should melt. This regulation also seeks 
to prevent the spread of gaseous and volatile 
fission products which might occur as the re- 
sult of a fuel meltdown without accompanying 
criticality. 


Prediction of temperatures in the cask may 
be difficult without some experimentation. Sud- 
dath'* has reported a test in which a simulated 
Sodium Reactor Experiment (SRE) fuel element 
positioned in an SRE fuel cask was heated elec- 
trically, equilibrium temperatures were meas- 
ured, and heat-transfer coefficients were cal- 
culated on the basis of the measured tempera- 
tures. In another set of tests described by 
Wett,'" irradiated Oak Ridge Research Reactor 
(ORR) fuel elements were cooled in stagnant 
air. It was found that a decay period of 19 hr 
is sufficient to keep the surface temperature of 
an ORR fuel element, in air, below a dangerous 
level. Wett states that, although the tests are 
not directly applicable to other than ORR fuel 
elements, the results of the investigation can 
be used in establishing orders of magnitude 
estimates for other fuel elements. It is likely 
that tests similar to these will be needed for 
each fuel and fuel-cask combination in order to 
establish compliance with the loss-of-coolant 
criterion. 
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Structural Integrity 


The irradiated-fuel shipping regulations do 
not require that a cask maintain its structural 
integrity under all conceivable accidents. The 
regulations specify that it shall be assumed 
that a cover edge of the loaded cask traveling 
at 44 ft/sec (30-ft drop) will come in contact 
with a solid object. It must be shown that in 
this situation the cask will remain covered and 
intact and the fuel will not be rearranged into a 
more reactive configuration. It is not required 
‘that there be no loss of coolant; the regulations 
on heat removal cover that situation. 


The fuel cask must be free of protruding 
parts except for handling trunnions, cask lid- 
lifting outriggers, or cooling fins. Items such 
as sampling and relief valves and expansion 
tanks must be recessed or protected from 
damage by steel guards. The processing plants 
desire that the bottom surface of the cask 
cover be free of projections so that it can be 
placed on the bottom of the fuel storage pool 
during unloading. 


External Radiation Levels 


The gamma-radiation level at any readily 
accessible surface of the cask may not exceed 
200 mr/hr. For truck shipments, a maximum 
level of 10 mr/hr at 1 meter also applies. For 
rail shipments, the level may not exceed 10 
mr/hr at 3 meters. 

In commenting on the proposed regulations, 
the New York Central System” urged that ad- 
ditional criteria be imposed for radiation levels 
at railway car surfaces to protect railway 
personnel. They also pointed out that the cask 
labels required under the regulations are of no 
value when the cask is in a closed car and sug- 
gested that external warning signs also be re- 
quired. 


External Contamination Limits 


Surfaces of the cask that may become con- 
taminated are to be made of series 300 stain- 
less steel or some similar material that can be 
decontaminated readily by scrubbing with deter- 
gent and water. It is noted that carbon steel, 
coated with a suitable paint, can be decontami- 
nated easily. However, one drawback in utilizing 
shipping casks with painted surfaces is the 
possible acceptance of active surfaces, non- 
decontaminated by normal techniques, which, 


upon subsequent flaking of the paint, would be 
exposed. 

Lead is frequently used for cask shielding. 
For heat transfer, a good bond is required be- 
tween the lead and the surface material. In the 
studies described by Piper and Langhaar," it 
was found that lead bonded better to carbon 
steel than to stainless steel, and therefore 
stainless-steel-clad carbon steel was used in 
the Savannah River cask design. 

The regulations provide that a cask shall not 
be shipped if the surface beta-gamma activity 
exceeds 4000 dis/min per 100 cm? or if the 
alpha activity exceeds 500 dis/min per 100cm’, 
If a cask were shipped with contamination ap- 
proaching the limits set in the regulations, ad- 
ditional decontamination would be required be- 
fore it would be acceptable to the processor at 
most sites. 

Contamination of shipping casks and fuel 
storage-canal water by ruptured fuel elements 
has also been discussed in a review by King.” 


Other Requirements 


The cask must be provided with means for 
sampling the coolant. Samples are taken at the 
processing plant to determine activity in the 
coolant. Normal acceptance criteria limit the 
activity level of such samples as something 
less than 5 x 10~* curies/cm*. Any indication 
of activity level approaching this value might 
well indicate the existence of a ruptured fuel 
element. !! 

The regulations specify that, where there is 
a pressure-relief valve, a filter shall be pro- 
vided to prevent, as far as possible, the release 
of particulate matter. 

In addition to the technical and engineering 
criteria discussed above, the regulations spec- 
ify requirements for labeling and describe the 
records that must be kept for the fuel. The 
Commission must be notified of any accidental 
criticality, major damage to the shipment, dis- 
persal of fission products, or loss. 


Possible Effects of the Regulations 


Economic considerations, alone, generally 
lead to the design of the largest possible spent- 
fuel cask. It is believed that the proposed 
regulations, if adopted in substantially their 
present form, will have the effect of scaling 
down the size of the casks that might have been 
designed in the absence of the regulations. The 
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NUCLEAR SAFETY CRITERIA 7 


requirements regarding criticality and heat re- 
moval will have a major influence on the cask 
sizes adopted. 

For the present, a conservative approach is 
the only one that can safely be taken in shipping 
spent fuel. The regulations appear to be con- 
servative enough to avoid serious accidents. 
Should experience warrant it, the regulations 
can, of course, be relaxed in the future. 

(W. L. Albrecht) 


Handling of Radiation Incidents 


There are many facets to the problems en- 
countered in the prevention and handling of nu- 
clear or radiation accidents.” It is therefore 
best that a nuclear safety program have its 
origin at the time of site selection and extend 
through the various phases of design, into the 
selection of processes and equipment, and into 
the selection and training of personnel.”! Ideally, 
such a program should prevent accidents, but, 
in spite of careful planning, it must be ac- 
cepted that accidents may eventually occur.?2-?6 
A plan for handling nuclear and radiation inci- 
dents is described here. Installations are re- 
quired to report any nuclear or radiation inci- 
dents to the AEC, and regulations have recently 
been established to ensure adequate and uni- 
form reporting, as well as followup action to 
prevent recurrences. 


An Emergency Plan 


In order to handle a nuclear incident or a ra- 
diation accident successfully, an installation 
must have a well-organized emergency plan 
and personnel trained to cope with the situation. 
Failure to plan and rehearse adequately may 
convert a small incident into a disaster. 

Basically, a radiation emergency plan is 
Similar to any nonnuclear emergency plan 
since its prime purpose is personnel safety and 
the minimization of property damage. Radiation 
emergency planning does differ, however, in 
the following respects: 

1. A nonconventional detection and warning 
system is required. 

2. A large variety of specialists, equipment, 
and facilities must be available or quickly as- 
sembled to assist in handling the emergency.”' 

3. There is a need to detain personnei after 
an evacuation in order to monitor them for 
radioactivity. 


4. The determination of injury to personnel 
and extent of property damage takes more time 
and technical effort than in an ordinary acci- 
dent. 

5. Prompt news releases for public under- 
standing are usually helpful because of in- 
ordinate fear of radiation by the public. 


Radiation emergency planning should start 
with a survey of the installation. All sources 
of radioactivity and fissionable material should 


be listed and studied, and the types of potential 
accidents should be determined, i.e., criticality, 
high radiation fields, and contamination. An 
estimate should also be made of the area and 
number of people which would be involved inthe 
event of the postulated accident. 

Once this information is available, the re- 
sponsibilities for adequate emergency planning 
and action must be fixed. In general, it is logi- 
cal to assign these responsibilities to the 
organization operating the facility that contains 
the potentially dangerous source, i.e., a reac- 
tor, a chemical process, a laboratory, or an 
office building. The responsible organization 
must study the potential emergencies within its 
area, make plans to avoid the occurrence of 
such emergencies, and make adequate prepara- 
tions for taking prompt action if an accident 
occurs. Each organization must ensure that: 

1. All personnel are familiar with the build- 
ing and installation evacuation plans andalarms 
and the procedure for properly reporting an 
emergency, including alerting those in the im- 
mediate area, as well as notifying the central 
communication center of the installation. 

2. A well-trained local emergency organiza- 
tion is developed to evacuate those in the im- 
mediate area to a point of safety, to detain 
personnel at that point of safety until a radia- 
tion survey is made, to notify the communica- 
tion center and, if possible, make recommenda- 
tions as to the immediate action that should be 
initiated, to account for all personnel, and to 
evaluate the situation and take appropriate 
action. 


In addition to such local or line organization 
emergency groups, emergency service and as- 
sistance groups should be available. For the 
most part, these groups would be made up of 
specialists, including medical men, health physi- 
cists, analytical chemists, firemen, and utility 
men, but plans must also be made for obtaining 
emergency supplies, transportation, and labor. 
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fication or expansion. The location of assembly 
points, decontamination centers, and medical 
stations should be as clearly and definitely 
specified as are the individual duty assign- 
ments. (W. Y. Gissel) 


Radiation Incident Reports 


Facility licenses carry a specific provision 
that the AEC be immediately informed, in 
writing, of any incident and any possibly unsafe 
condition relative to the operation of the facility. 
In addition, licensees are required to make an 
annual report of operating experience and to 
keep records on the release or discharge of any 
radioactivity beyond the effective control of the 
licensee. These provisions are not completely 
definitive, however, and there is always a ques- 
tion of judgment involved as to what constitutes 
an incident and what indicates a possibly unsafe 
condition. 


This subject was discussed by C. K. Beck, 
Chief of the Hazards Evaluation Branch, during 
the hearing to consider amendments to the Gen- 
eral Electric Company operating license for the 
Vallecitos Boiling-Water Reactor (VBWR).”° In 
the course of the hearing it was brought out that 
various incidents took place during 1957, 1958, 
and 1959 that were not reported to the AEC be- 
cause, in the Company’s opinion, they did not 
amount to indications of an unsafe condition. 
However, following a July 1959 request from 
the AEC for information on one incident, the 
Company agreed to report all incidents. Beck 
stated that reportable incidents (1) need not 
include all activity releases, (2) might be dif- 
ficult to define quantitatively, and (3) could be 
qualitatively described in candid discussions 
between the AEC and the applicant (or licensee). 


In order to improve the reporting and investi- 
gation of radiation incidents, the AEC has 
established definite procedures and responsi- 
bilities, which are incorporated in Chapter 0703 
of the AEC Manual.?® The new procedures, 
which were approved Mar. 16, 1960, and were 
published in April, establish a single basic sys- 
tem applicable to investigations of all types of 
incidents and set forth policies, standards, and 
responsibilities for reporting and investigating 
incidents in AEC contractor and licensee opera- 
tions. Under the new procedures the Division 
of Compliance will receive concurrent notifica- 
tion of incidents reported immediately to AEC 
headquarters, as well as reports on manage- 


ment followup on findings and recommendations. 
The categories of incidents that require im- 
mediate notification to AEC headquarters are 
listed. 

Provisions of the new procedures which are 
of particular interest in the prevention of re- 
currence of an incident are quoted below: 


0703-022 Investigation of incidents shall be initi- 
ated by responsible AEC officials and shall provide 
information to: 


c. determine corrective action appropriate to 
minimize or preclude similar incidents; 


e. assist in the improvement of AEC policies, 
standards, and regulations, and of operations 
thereunder; 

f. prepare a written report, 


0703-041 Managers of Operations are responsible 
for: 


c. reporting fully to the responsible operating 
division and to the Division of Inspection the 
management actions taken or to be taken on 
findings and recommendations contained in in- 
vestigative reports to Headquarters. 


0703-043 The Division of Inspection is responsible 
for: 


b. the conduct of all Headquarters investigations 
except those assigned to the Division of Com- 
pliance; 

c. conducting independent investigations under 
certain conditions. 


0703-045 The Division of Compliance is respon- 
sible for: . 


b. informing the Assistant General Manager for 
Regulation and Safety of the occurrence, in- 
vestigation, and management actions taken re- 
garding incidents. 


Among the standards for investigation of in- 
cidents by managers of operations are: 


5. As a minimum, investigative reports should in- 
clude: 
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b. an orderly presentation of the facts relative 
to the incident; 

c. a clear statement of the conclusions reached; 

d. clear and specific recommendations which will 
make effective disposition of all phases of the 
case; 


6. ... A record shall be maintained of management 
actions taken on investigation findings and rec- 
ommendations. 


(L. A. Mann) 


Evaluation of Reactor Hazards 


A qualitative method for the estimation of the 
magnitude of the hazard associated with the 
operation of a nuclear reactor has been pro- 
posed by Siddall in a recent paper.*® In terms 
of money and lives per unit time, Siddall has 
equated the upper limit of the permissible haz- 
ard that arises because ofa particular operation 
to the expected gain in gross national product 
and in over-all increased life expectancy. Im- 
plicit in the analysis is the definition of the 
term “hazard.’’ It is the intent of the follow- 
ing discussion to make this definition explicit 
and to suggest further criteria that may be used 
for the purpose of arriving at a numerical value 
of the magnitude of a hazard. The reader is 
warned not to expect to find here a solution to 
the problem of assigning numerical values to 
hazards. Rather, it is hoped, by characterizing 
the problem in somewhat more exact terms 
than are usually encountered, to suggest pos- 
sible methods of monetary evaluation. 


Definition of Hazard 


The word “hazard’’ may be loosely defined 
to mean “exposure to risk of loss or injury.”’ 
Everyone is constantly exposed to various kinds 
of risks, and what is meant when it is said that 
some operation or course of actionis hazardous 
is that the probability of injury resulting there- 
from is large or that the injury, shouldit occur, 
will be serious. In order to give quantitative 
meaning to the word “hazard,” consider a 
course of action which, if pursued, has a 
finite probability of one and only one type of 
injury or loss. If this course of action results 
in injury or loss, that event will be called an 
“accident.’’ If the total cost (dollars, for ex- 
ample) that would accrue should the accident 
occur is denoted by D, the parameter D will be 
called the “dollar damage.’’ Let 7 denote the 


“risk,’’ i.e., the probability per unit time (years, 
for example) that the course of action will re- 
sult in an accident. Then, in this simple case, 
the “dollar hazard’’ in dollars per year, de- 
noted by H,,, may be defined as 


Hy= Dr 


In some accidents loss of life may occur, and 
presumably a dollar value could be placed on 
human life and included in the value of D. For 
reasons that will become apparent, however, it 
seems better to include only the cost of prop- 
erty loss, loss of working time, insurance 
payments, medical bills, etc., in the value of 
D. In order to account for loss of life, a second 
type of hazard, the “mortality hazard,’’ denoted 
by H,,, may be defined. If the expected loss of 
life from the accident is M lives, then the 
mortality hazard in lives per year may be de- 
fined as 


Hy, = Mr 


With the use of these relations, it is possible, 
in principle, to characterize the hazard which 
arises from the given operation in terms of the 
two numbers H, and H,,. 

Obviously the situation described above is 
quite artificial, since it was assumed that only 
one type of accident could result from a given 
operation or course of action. There are, of 
course, many different types of accidents which 
can be associated with a given operation, and 
moreover, there are many different ways of 
classifying them. Thus one is led naturally to 
the notion of “partial hazards.’’ If, for ex- 
ample, the course of action under consideration 
were the operation of a motor vehicle, several 
different types of accident could be postulated, 
and a partial hazard could be defined for each 
type. The total hazard associated with the 
operation of the motor vehicle would be the 
sum of the partialhazards. The H, and Hy» re- 
lations would then become 


and 
Hm = Hm. = L M,", 


where j refers to the jth type of accident and 
ranges over all possible types of accidents as- 
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sociated with the operation in question. In a 
typical case, j might range from 1 to 7. The 
seven types of accidents and Hy, values for 
each, based on data available from the National 
Safety Council,*! are listed in the following 
tabulation. 


Hy, lives 

per year 
Type of accident (x 104) 
Striking a pedestrian 1.142 
Collision between vehicles 1.845 
Overturning or running off road 1.918 
Collision with railroad train 0.177 
Collision with bicycle 0.070 
Collision with fixed object 0.249 
Other 0.016 
Total 5.417 


Hence the total mortality hazard which arises 
from the operation of a single motor vehicle is, 
on the average, 5.417 x 10~™ lives per year. The 
corresponding H, value, or dollar hazard, is 
$81.78 per year. 

In this illustration the partial hazards were 
obtained a posteriori from accident statistics 
and represent an average value for all operat- 
ing motor vehicles in the United States during 
the year 1958. The task of obtaining these fig- 
ures a priori for a single vehicle would, if even 
possible, be extremely complex. In the case of 
the operation of a nuclear reactor, the statistics 
that would be needed to obtain reliable data on 
hazards are not available, and thus some sort 
of a priori calculations must be made. Actually 
the task of computing reasonable values of M; 
and the D, is not too formidable provided the 
possible accident situations can be listed. The 
difficulty lies in finding the values of the ’; and, 
to a lesser extent, in listing all the possible 
types of accidents. The latter is obviously 
closely related to the former but is probably 
more susceptible to intelligent rationalization. 
The customary way of side-stepping this prob- 
lem has been to examine in detail those acci- 
dents for which the values of Dj; and Mj; are 
highest and for which, by some subjective proc- 
ess of reasoning, it has been determined that 
" is significant. This is the so-called “maxi- 
mum credible accident’’ approach. It has the 
Weakness, also pointed out by Siddall, that, al- 
though it selects for study the most spectacular 
accident, it neglects the fact that an accident 





which may cause less damage, but which is 
more likely to occur, can very easily constitute 
a greater hazard than the maximum credible 
accident. Moreover, once this choice of the 
“worst case’’ is made, it may obscure other 
more subtle possibilities. 


Acceptable Hazards 


Every operation or course of action has as- 
sociated with it some finite hazard, and, in 
principle, if the upper limit of the hazard, which 
can be chosen for each operation, is exceeded, 
that operation would be rendered undesirable. 
The upper limit would, of course, vary with the 
individual making the choice. For this discus- 
sion the “acceptable hazard’’ associated with 
any given operation is considered to be the 
hazard that is of a magnitude which is not more 
than the public is willing to condone. Before 
turning to a discussion of the possibility of 
finding ways to estimate 7; some consideration 
must be given to the question of what the values 
of the acceptable hazards associated with the 
nuclear energy industry are likely to be. 


It is probably not too much of a generaliza- 
tion to assert that the magnitude of the hazard 
associated with a given operation that is ac- 
ceptable to the public will be proportional to the 
amount of benefit or pleasure which the public 
believes it will realize from the operation. Since 
this belief depends upon the state of public 
knowledge with respect to the operation, the 
value of the acceptable hazard may change with 
time. The problem is further complicated by 
the fact that bizarre or spectacular accidents 
appear to be more feared than do commonplace 
accidents. It is an odd characteristic of the 
human race that its members prefer to be 
maimed or killed by familiar and well-proven 
methods. Infrequent accidents in which loss of 
life is high appear to be less tolerable than 
more frequent accidents in which loss of life is 
low, even though the mortality hazard may be 
lower in the former than in the latter case. 
Conversely, infrequent accidents accompanied 
by high dollar loss seem to cause less indigna- 
tion than do more frequent low-dollar-loss ac- 
cidents. Whether or not this behavior of the 
public is illogical is not germane to the issue 
at hand. The fact is that it exists, and it must 
be considered in determining the magnitudes of 
the acceptable hazards. It might be remarked, 
parenthetically, that an investigation of the re- 
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action of the public to situations which are at 
the same time hazardous and beneficial might 
well produce some interesting and useful re- 
sults. 

There is one further distinction which must 
be made at this point; that is, the distinction 
between hazards which affect only persons and 
property directly associated with the operation 
fron which the hazards arise and those which 
affect persons and property not associated with 
that operation—the innocent bystander. For 
example, the hazards inherent in the operation 
of a coal mine affect primarily only those per- 
sons employed in this operation and the property 
of the mining company; on the other hand, the 
hazards which arise in the manufacture and 
storage of anhydrous ammonia may affect not 
only the employees and the plant property but 
also all persons and property in the immediate 
neighborhood of the plant. Those hazards which 
affect only the employees and the plant property 
will, as is usual, be called “occupational haz- 
ards’’ and will be denoted by the superscript o. 
The hazards which affect off-plant property and 
personnel will be called “public hazards’’ and 
will be denoted by the superscript ». Thus the 
dollar hazard may be written as 


Oo, Oy. 
Hj = b Dir; 
Hf = y Dbr, 
ees j 


- P=F (n° ap? 
H, =H + Hy =h (D} + Dr, 


Similar expressions can be written for the 
mortality hazards. 

Only the public hazards will be considered in 
the following, not because it is felt that the oc- 
cupational hazards are unimportant, but rather 
because less is known about the hazards to the 
general public. In considering the public haz- 
ards, such long-range hazards as the increas- 
ing concentration of fission products and other 
toxic substances in the various environmental 
media will be omitted, even though such con- 
ditions may well turn out to be among the most 
dangerous associated with development of the 
nuclear industry, and attention will be confined 
to injuries and losses which could occur in a 
relatively short period of time. 

The question of the magnitude of the ac- 
ceptable external hazard arising from the opera- 
tion of a nuclear reactor can, in the last analy- 


sis, be answered by the public only. It seems 
logical to suppose that the greater the benefit 
to be expected from nuclear energy, the greater 
will be the acceptable risk. As was suggested 
above, however, the public is not constrained to 
act in a logical fashion. Moreover, no omniscient 
agency is available to define what a logical 
fashion consists of. For the present it appears 
that it will not be acceptable in the nuclear 
industry to greatly exceed the magnitude of the 
public hazards generally found in well-estab- 
lished industries. One possible criterion is to 
require that the public hazard from a reactor 
shall not exceed the average for all other types 
of industrial operations. 


Another method would be to relate the public 
hazard to some familiar operation. In doing 
this, care must be taken because the analogies 
are often not complete. At the risk of falling 
into this very error, consider, for example, 
the requirement that the public hazard intro- 
duced by the construction and operation of a 
reactor shall not exceed the total hazard arising 
from an increase of 1 per cent in the number of 
motor vehicles operating in the vicinity of the 
reactor location. Then, if there were 300,000 
automobiles in the area considered, it would be 
required that HP be less than 1.625 lives per 
year and H} be less than $245,000 per year. 
The prospect of this annual loss to the com- 
munity would certainly not prevent 3000 per- 
sons from buying automobiles. But would it 
cause serious opposition to the construction of 
a reactor? 

If we take the simple case in which there is 
only one type of external hazard, and we as- 
sume that the corresponding accident would 
cause the loss of 100 lives and $10 million in 
property damage, then, on the foregoing basis, 
we must have 7<0.01625 to satisfy the con- 
dition on Hi; and r < 0.0245 to satisfy the con- 
dition on H”’. By taking the smaller of these, 
ry <0.01625 per year, we see that both conditions 
are satisfied, and the expected accident fre- 
quency must be less than 1 per 62 years. 


Hazards Probabilities 


So far we have carefully avoided a discussion 
of methods for a priori evaluation of 7;. It 
seems reasonable to conclude that, given the 
description of an accident, the results can be 
estimated with some degree of confidence. On 
the other hand, the tabulation of the spectrumof 
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possible accidents, together with their proba- 
bility of occurrence, is ofthe utmost complexity, 
if it is, indeed, attainable at all. It is the pri- 
mary purpose of these remarks to focus the 
attention of the reader on the fact that the de- 
termination of these probabilities is the central 
problem of hazards analyses. It is perfectly 
clear that, if either of the factors Dor ris 
zero, then no hazard exists. It is equally clear 
that, in the nuclear industry, the values of D 
will often be very large. Therefore, in order 
to reduce the hazard to an acceptable value, it 
will be necessary to maker very small. It is 
thus important to develop ways of evaluating 7. 

Some approaches to this problem have been 
made, notably by Kahn*?»*3 and by Freedmanand 
Langevin.*4 Kahn has examined®™ the situation 
in which safety instrumentation is inspected 
periodically and has studied the probabilities 
of failure of the instrumentation, followed by 
an operating system failure, within the inspec- 
tion period. In the second paper® Kahn dis- 
cusses the optimization of the design and 
maintenance of such a system from an eco- 
nomic standpoint. Freedman and Langevin*4 
have constructed a simplified stochastic model 
of reactor operations that focuses attention 
primarily on the interaction of human error 
with the components of the system. Although 
these papers, to the best of the reviewer’s 
knowledge, are the first to give recognition to 
the problem and the first to attempt to attack it 
from a probabilistic standpoint, it is clear that 
a great deal of work remains to be done. 

One approach which may prove fruitful is to 
abandon any attempt to assign absolute values 
tor and, having in some subjective manner 
picked a standard, to attempt to evaluate 7 rela- 
tive to this standard. For instance, the risk of 
a startup accident will, all other things being 
equal, be reduced by a factor of 2 if the num- 
ber of startups is halved. The risk of areactor 
runaway is changed in a predictable manner by 
a change in the amount of available excess re- 
activity. If the damage factor in a partial haz- 
ard under consideration is proportional to the 
power level, an increase by a factor of 1.5 in 
power would require a decrease by the same 
amount in the corresponding risk. All other 
things being equal, this might take the form of 
a three-channel safety circuit rather than a 
two-channel circuit. It should also be noted 
that increases in D; for one reason can be off- 
Set by decreases for some other reason, thus 


eliminating the need for a change in the cor- 
responding 7;. 

Similar comparisons can be made with re- 
spect to other hazards; however, in the case of 
mortality hazards, it may be necessary to 
make further concessions to the psychological 
factors affecting public acceptance of these 
hazards. It is true that 1 times 100 is equal to 
100 times 1; however, it may be that one ac- 
cident per 100 years which causes 100 deaths 
is considered less acceptable to the public than 
one death per year for 100 years. If this turns 
out to be the case, it may be necessary to re- 
duce the allowable partial hazard corresponding 
to large values of M, as the value of M, in- 
creases. 


Conclusions 


The advantages of a scheme such as that pro- 
posed above are numerous. The introduction of 
quantitative definitions of the various hazards 
provides a nomenclature that permits discus- 
sion of the subject within a common frame of 
reference. The use of quantitative ideas, even 
though the parameters involved cannot be fully 
evaluated, permits the separation of the causes 
of hazards into component parts that are sus- 
ceptible to study. The use of some procedure 
for estimating the values of 7; provides the de- 
signer with at least a semiquantitative way of 
appraising the relative magnitude of the haz- 
ards associated with his design and should 
facilitate his discovery of the parameters most 
likely to affect the hazards. Finally, the pro- 
posed scheme permits an examination of the 
causes and results of accidents that can be kept 
free from emotional influence. The main dis- 
advantage, of course, is a lack of understanding 
of ways in which to estimate the risks. In ad- 
dition, there is the ever present danger that 
the designer will place too much trust in his 
calculations. 

Most of the work on hazards which has been 
done to date has been directed toward evaluating 
the results of various accidents, i.e., assess- 
ment of D; and M.. With the exceptions of the 
papers cited, the reviewer is not aware of any 
serious attempt to study quantitatively the 
probability that dangerous situations will in- 
deed arise. If a reasonably accurate method of 
obtaining values of the risks can be devised, it 
should then be possible to elevate the business 
of evaluating reactor hazards to the rank ofa 
science. (F. T. Binford) 
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Basic Considerations 
of Radiation Protection 


The bases for determining standards of ra- 
diation protection and the designation of ap- 
propriate agencies for establishing and enforc- 
ing such standards are of vital concern to 
nuclear industry and research. The problems 
of radiation protection have been with the pro- 
fessional users of radiation for over half a 
century but are now engaging the attention of 
the public and of the government to an increas- 
ing degree. The Congressional hearings of the 
Joint Committee on Atomic Energy from May 
24 to June 3, 1960, were largely concerned with 
these problems and will doubtless be educational 
for the public, as well as a major influence in 
shaping the policy of the government. 


During the first quarter of this century, ra- 
diation protection was largely the responsibility 
of the user, and except for scientific labora- 
tories, the users were the small but increasing 
number of radiologists who used X rays for 
diagnosis and therapy. In 1928 the forerunner 
of the present International Commission on 
Radiological Protection (ICRP) was formed, 
and various national committees, such as, in 
the United States, the National Committee on 
Radiation Protection (NCRP), came into ex- 
istence at about the same time. These were 
professional groups which, without legal au- 
thority, issued recommendations concerning 
radiation protection. By 1935, when experience 
with radium had emphasized the subtle nature 
of the hazard and demonstrated the existence of 
long-delayed effects of radiation, these pro- 
fessional groups were already well enough 
established to meet the challenge adequately. 
The limit on body burden published in 1941 by 
these professional groups is still the standard 
for occupational exposure to radium. 


Each of the four articles reviewed here*®>—*® 
is concerned with one or another aspect of the 
question of the proper bases for the determina- 
tion of radiation-protection standards. The re- 
port of the Ad Hoc Committee of NCRP*® on 
“Somatic Radiation Dose for the General Popu- 
lation’’ is the document of main interest. The 
other three articles**-** are briefly reviewed 
to illustrate the current public interest in basic 
policies of radiation protection and the treat- 
ment afforded these issues by the press. 


The development of atomic energy vastly in- 
creased the complexity of the problems. The 
number and variety of sources, the intensity of 
the radiation, and the number of people poten- 
tially exposed to radiation all increased many 
fold. Even during the period of secrecy im- 
posed by the war, it was largely the experience 
and judgment of these professional groups that 
defined standards applicable to the new sources. 
After the war, when atomic energy emerged into 
public view and began to be applied for scien- 
tific, industrial, and medical uses, the ICRP 
and NCRP elaborated their recommendations 
to keep pace with the needs. It is a tribute to 
these groups that, throughout almost 15 years 
of rapid development and expansion of this 
technology, their recommendations have been 
the basis for radiation protection, and during 
this time the atomic energy industry has been 
one of the safest of modern industries. 

By 1957 the number of people potentially ex- 
posed reached a maximum when it was realized 
that radioactive fallout was distributed over the 
entire globe. Radiation protection then became 
a problem of general interest to the public, and, 
when it became apparent that estimates of the 
hazard lacked the precision and finality the 
public generally associates with scientific pro- 
nouncements, the interest became more than 
a little tinged with concern. During the last 
three years, a succession of Congressional 
hearings, the space devoted to radiation haz- 
ards by the press, and the organization of 
groups to protest or urge a point of view have 
indicated a continual growth of awareness of 
the problem in governmental circles and also 
on the part of the public. 

The 1958 recommendations of the ICRP*’ gave 
rather detailed suggestions concerning occu- 
pational exposure, exposure of special groups, 
and also exposure of the populace. The ICRP 
suggested that the genetic dose from all sources 
other than medical practice or natural back- 
ground radiation be limited to 5 rem to age 
30 years. This limit was based on estimates 
of the changes in the mutation rate such a dose 
might produce and on the consequences fore- 
seen by the geneticists. The ICRP did not sug- 
gest a dose limit based on somatic damage, but 
they did suggest limits on environmental con- 
tamination which would control this damage. In 
the case of somatic damage, the hazard is 
largely to the individual rather than to the race, 
as in the case of genetic damage, and little 
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information is available concerning somatic 
effects in man from doses of radiation of the 
order of background radiation. The 1958 sug- 
gestions were somewhat modified“* by the ICRP 
in July 1959, but the modifications do not indi- 
cate the scientific or other considerations that 
were used to determine the dose limits based 
on somatic damage. Meanwhile, the NCRP 
adopted‘! essentially the same limits on genetic 
dose as those recommended or suggested by the 
ICRP but appointed an Ad Hoc Committee to 
suggest proper bases and review the questionof 
dose limits based on somatic effects. 

The report of the NCRP Ad Hoc Committee® 
states that there is no firm dose-effect relation 
known in the range of dose that is of interest, 
i.e., there is almost no quantitative and little 
qualitative evidence of the biological effects 
that can be attributed to doses of radiation of 
the order of background radiation. The Com- 
mittee considers that it is conservative to as- 
sume a linear relation and then extrapolate 
from the effects of high doses to the effects of 
lower doses. On this basis it follows that there 
is no threshold below which damage is non- 
existent, and thus all radiation exposure must 
be considered as having some harmful effects. 

It follows that no exposure is justified unless 
there is the expectation of compensating bene- 
fits, and the greater the benefits, the greater 
the risk society or the individual may be will- 
ing to incur in order to have these benefits. 
This is a truism in the case of medical ex- 
posure, where very large doses are frequently 
accepted in order to treat a malignancy which 
otherwise might be fatal. Whether the hazard 
of the treatment is overbalanced by the bene- 
fits is a matter for the individual and his doctor 
to decide, and the public is not involved ina 
major way. The patient and his doctor must 
“weigh the expected benefits against the hazard 
of the radiation’’ and decide accordingly. 

Problems of waste disposal and environmental 
contamination often present situations in which 
the benefits and the hazards are not confined to 
the same individuals or groups of individuals. 
Thus, although atomic power may well prove to 
be a major step toward a fuller and richer life 
for modern man, the hazard from the waste 
products may be largely confined to certain 
groups which happen to live near a given site. 
Similarly, weapons testing may be a necessary 
condition for the preservation of the American 
Way of life, but the fallout material is not con- 


fined to the United States and it is not distrib- 
uted uniformly. Thus the hazards may not be 
commensurate with the benefits in the case of 
certain individuals or groups. Actually this 
situation is present to some degree in most 
areas where hazards must be regulated, and it 
is clear that the government is the agency for 
finally deciding the questions thus raised. 

It follows from these premises that limits 
may be different for different applications, i.e., 
greater benefits may justify a greater level of 
risk. Since it is difficult to assess either the 
benefits or the risks in any very precise way, 
it is necessary to have a basis for exposure 
such that elaborate studies and evaluations are 
not necessary. The Ad Hoc Committee con- 
siders that the level of background radiation 
supplies such a basis. Man has evolved in the 
presence of this degree of exposure, and there- 
fore its consequences do not seem to be cata- 
strophic. Moreover, since it varies by factors 
of 2 or 3 over wide areas and since any con- 
sequences of this higher degree of exposure 
have thus far escaped detection, it is indicated 
that a doubling of the background dose, or per- 
haps even a tripling, may be expected to have 
no immediately discernible effects. Thus the 
Ad Hoc Committee recommends that “the maxi- 
mum permissible dose of man-made radiation 
(excluding medical and dental sources) should 
not be substantially higher than the background 
level of natural radiation without a careful ex- 
amination of the reasons for higher values.’’ 

The report also points out that by the same 
linear hypothesis a situation does not change 
from “safe’’ to “dangerous’’ when any selected 
dose level is exceeded. In the absence of a 
threshold, there is a gradual increase of risk 
as the dose increases. Thus the words “sub- 
stantially higher than background’’ do not imply 
a sharp criterion. As remarked above, the 
background varies by factors of 2 or more with 
location, and this also implies a fairly wide 
band of values rather than a single number. 

The Ad Hoc Committee was not charged with 
the task of selecting a dose limit. Thus the 
report only indicates an approach to the prob- 
lem. Although this approach cannot be said to 
be new, it has seldom been presented with so 
much emphasis. The NCRP has accepted the 
report and has published it, but, since it pre- 
sents only a philosophy of protection rather 
than specific guides, it has not been adopted as 
an official recommendation of the NCRP. The 
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report has been turned over to Subcommittee I 
of NCRP, which is charged with the selection of 
basic limits of exposure. 

The report of the Ad Hoc Committee will 
serve a useful purpose in that it exemplifies 
one particular approach to the problem, and, in 
the absence of data on biological effects, it is 
perhaps the only quantitative basis now avail- 
able. It has several severe limitations so far 
as practical use is concerned. Although the 
report has recognized that higher dose levels 
may be appropriate and are to be set by 
“balancing the benefits and the risks,’’ it does 
not indicate how either the benefits or the risks 
are to be assessed. Whether the background 
radiation is to provide any guidance for setting 
these higher levels is not explicitly set forth. 
On the linear hypothesis the risk would in- 
crease proportionally with dose, but, since the 
initial dose must be attributed to background 
radiation, the linear hypothesis does not pro- 
vide a quantitative guide for estimating such 
risks. It is generally considered that only a 
fairly small fraction of “naturally occurring’’ 
malignancies can be attributed to background 
radiation. 

The report does not distinguish between ex- 
posure of single organs or exposure of major 
portions of the body, although experiments have 
indicated rather marked differences in the ef- 
fects to be expected. Likewise, the report is 
rather vague with respect to whether the limit 
applies to each individual or is tobe interpreted 
as an average over a population or group. Un- 
doubtedly, when the NCRP seeks to apply the 
principles enunciated here in setting levels of 
dose for various uses and groups of people, 
these questions must be resolved. 

The Ad Hoc Committee report does not con- 
sider who is to undertake the task of balancing 
the benefits and risks. There has, however, 
been considerable discussion of this point by 
other individuals and groups. It has beenargued 
that professional groups, such as NCRP and 
ICRP, were the appropriate agencies when uses 
of radiation were largely in the hands of a 
tightly knit professional group, such as the 
radiologists. Since early scientific and indus- 
trial uses of radiation did not result in ex- 
posures of large numbers of people, the central 
problem was that of a profession. Over the 
past 15 years, however, radiation protection 
has been effectively the concern of the AEC, 
although it could only be responsible for the 


actions of itself, its contractors, and its licen- 
sees. The AEC took the recommendations of 
NCRP and adapted them to its specific prob- 
lems, but many industrial, scientific, and medi- 
cal uses of radiation were not within its juris- 
diction. The fact that the AEC is responsible 
both for promoting the use of radiation and for 
regulating its use to ensure a proper degree of 
protection has been a source ofcriticism. Cur- 
rently the AEC is offering the state govern- 
ments a chance to assume some responsibility 
for radiation protection. Recent articles*.3! 
have indicated public questioning of these and 
related matters, and a summary of vafious 
points of view concerning the proper govern- 
mental agency to be primarily responsible for 
radiation protection has been issued by the 
Atomic Industrial Forum.*® 

In October 1959 the Congress established the 
Federal Radiation Council,” and charged this 
cabinet-level body with “coordinating the policy 
of the various governmental agencies in mat- 
ters of radiation protection.’’ Although it is 
too early to foresee just what role each will 
play, it seems clear that the federal govern- 
ment, the state governments, and even munici- 
pal governments will eventually share respon- 
sibility for radiation protection. On the federal 
level, it seems likely that the Public Health 
Service, the Department of Defense, and others 
may eventually share responsibility along with 
the AEC. 

The background material and points of view 
which eventually led to the formation of the 
Federal Radiation Council were discussed ina 
Scieyce article.*® The question of the proper 
agency to determine limits for population ex- 
posure and to monitor for their enforcement of 
the limits was considered, and the AEC’s 
Project Sunshine, which is concerned with the 
fallout problem, was described. The record of 
the Public Health Service in the field of radia- 
tion protection was cited. Curiously, the Science 
article did not mention the cooperation of the 
Bureau of Standards and the NCRP that has 
been perhaps the most influential effort in this 
field (see reference 41). 

Another Science article,*" entitled “Reports 
Disagree on Radiation Hazards,’’ directs at- 
tention to certain conflicts which are supposed 
to exist between recommendations of the NCRP 
and the ICRP without doing anything to clarify 
or even identify the issues. The specific re- 
ports and recommended limits in question aré 
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only loosely identified. The writer seems un- 
aware that the recommendations of the ICRP 
and NCRP so far as occupational exposure is 
concerned are basically similar. As to limits 
for exposure of populations, the recommenda- 
tions of NCRP and ICRP on genetic dose are 
virtually identical. For somatic dose, the NCRP, 
as mentioned above, appointed its own Ad Hoc 
Committee to consider the question, but the 
Committee had not submitted its report at the 
time the Science article was published. There- 
fore the reported “conflict’’ on matters of 
somatic population exposure was in anticipa- 
tion of the NCRP report. Thus far the con- 
flicting recommendations of the NCRP andICRP 
have been largely a matter of the different 
dates of publication of the reports of these 
groups. (W. S. Snyder) 
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II ACCIDENT ANALYSIS - 





Autocorrelation Functions and 
Operational -Safety Analyses 


The use of autocorrelation functions in noise 
analysis has been conventional in electrical en- 
gineering and related fields for many years; the 
first symposium! held in this country on appli- 
cations of autocorrelation analysis to physical 
problems was held in June 1949. Application to 
the analysis of actual reactors has been rela- 
tively recent, however, and it was apparently 
accelerated by the work of Moore.” 

The autocorrelation function can be used in 
analyzing reactor “noise,” and it permits a de- 
termination of the relative magnitude of the 
transfer function as the transfer-function pa- 
rameter travels the imaginary axis. Where 
applicable, this method of analysis permits the 
evaluation of the effective delayed-neutron frac- 
tion divided by the mean lifetime of prompt neu- 
trons. For unknown transfer functions, it deter- 
mines their shape; in particular, it detects 
sharp resonances in the transfer function. Al- 
ternatively, if the mathematical model is known, 
evaluation of coefficients in the equations canbe 
performed with knowledge of the transfer- 
function amplitude as the function parameter 
takes on different values; or, if all coefficients 
are known, information can be obtained about the 
input noise or reactivity disturbance. To illus- 
trate its application, noise analysis has been 
used to determine specific reactor parameters 
for several reactors at the Argonne National 
Laboratory (ANL),* for the Sodium Reactor Ex- 
periment (SRE) and the Kinetic Experiment on 
Water Boilers (KEWB),‘ and for the Experi- 
mental Boiling-Water Reactor (EBWR).° 


Operational-Safety Application 


The application of noise analysis to opera- 
tional safety is associated with the transfer 





function as a function of operating conditions. 
As changes occur in reactor operating condi- 
tions, the transfer function of the system may 
also change, and this change may be indicative 
of certain undesirable conditions being present 
within the reactor. For example, in the case of 
a homogeneous fluid-fuel reactor, deposition of 
fuel on surfaces within the core is undesirable; 
however, such deposition is difficult to measure 
physically, and a relatively long time [about a 
day on a routine basis for the Homogeneous Re- 
actor Test (HRT)]| is required to obtain an indi- 
cation of deposition from the results of chemical 
analyses. By noise analysis, it may be possible 
to obtain quickly some of the characteristics of 
the system transfer function at various operating 
times, and thereby determine whether undesira- 
ble physical changes are occurring within the 
reactor. Some preliminary analyses of this 
nature have been performed by Hirota,® and 
they will be discussed later. The physical 
changes associated with changes in transfer- 
function characteristics may have to be deter- 
mined empirically, but, once established, spe- 
cific characteristics can be associated with 
desirable or undesirable operating conditions. 
Even if correspondence with specific physical 
changes were not established, a marked change 
in transfer-function characteristics could indi- 
cate an abnormal condition that should be in- 
vestigated with care. _ 


Background 


In order to appreciate what information reac- 
tor noise analysis can provide, it is pertinent to 
review reactor stability, transfer functions, 
characteristic equations, Nyquist’s stability cri- 
teria, and frequency-response plots. 


Stability. In specifying the nuclear design of 
a reactor, it is desirable that the criteria be 
such that the reactor will be stable under oper- 
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ating conditions. As applied to reactors, sta- 
bility refers, in general, to those characteris- 
tics that will cause the reactor power to 
approach an equilibrium value following a sys- 
tem disturbance. In this discussion, a stable 
system is one in which there is no buildup in 
power oscillations following a reactivity addi- 
tion. 

In studying reactor stability, the appropriate 
time-dependent equations of motion are ex- 
amined. Although equations that describe reac- 
tor systems are basically nonlinear, stability is 
usually determined on the basis of linearized 
equations of motion. There are two fundamental 
reasons for this approach: (1) the behavior of 
the nonlinear system approaches that of the 
linear one if the system disturbances are suffi- 
ciently small, and (2) linéar equations can be 
analyzed in a more generalized manner than can 
nonlinear equations, and thus more information 
concerning system behavior can be obtained. In 
the following discussion, it is assumed that, for 
the purpose of stability analysis, the reactor 
system is approximated by a set of linear equa- 
tions with constant coefficients. 


Characteristic Equations and Transfer Func - 
tions. The reactor parameters, or reactor 
characteristics, that are involved in the deter- 
mination of system stability appear in the so- 
called “characteristic equation.” In order for a 
system to be stable, it is necessary that the 
characteristic equation have no root witha posi- 
tive, real part. 

For purposes of illustration, the conventional 
linearized kinetic equations will be used and 
written as 


dx _ |5k,(t) — Bx 
SSR [sik Ale ee 
Zi ; DA; ¢; (1) 
and 
dc; Bi 
— +r.c, = — 2 
= dey = 7X (2) 
where c, = latent power associated with 


delayed-neutron precursors of 
ith group, normalized to power at 
time zero 
5k,(t) = reactivity 

l = prompt-neutron lifetime 

¢t=time 

x =reactor power normalized to its 
value at time zero 


f = fraction of fission neutrons which 
are delayed 

B; = fraction of fission neutrons in ith 

group of delayed neutrons, )/ B= 

B t 

A, =decay constant associated with 
ith group of delayed-neutron pre- 
cursors 


Stability is determined by the time behavior of 
x following a reactivity disturbance. Since de- 
viations from initial values are of primary in- 
terest, Eqs. 1 and 2 shall first be modified by 
letting 


f=x-1 (3) 


and 


v,=¢,-—c¢,(0)=c, - fi (4) 


i 
Equations 1 and 2 then become 


dg _ dke(t) 
“= 


+ Daw, fe (5) 





and 
dv; B; 
= + d,v; —t (6) 


In order to obtain x(t) = ¢(¢) +1, it is con- 
venient to solve Eqs. 5 and 6 by means of the 
Laplace transform. Letting 


t=/ [z(t] = ‘ e~St ¢(t) dt 
0; = 7 [v,(t)] 


5k, = 7 [6k,(t)] 


the transformed equations give £ as 





f= l (1) 


The value for ¢¢) is obtained by taking the in- 
verse Laplace transform of ¢(s), namely, 


e(t) = 7~"[E(s)] = = este(s) ds (8) 


where 5 is chosen such that all singularities of 
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t(s) lie to the left of the line having 6 as its real 
part. The singularities of interest will oecur at 
the zeros of the denominator term of ¢(s) [the 
singularities associated with 6k¢(s) will be de- 
termined by the reactivity driving function, and, 
as such, they do not influence stability]. There- 
fore, in evaluating the integral term in Eq. 8, 
the values of s associated with the resulting e°! 
terms will be those which satisfy the following 
equation: 


B A;B; ee 
‘+e- gy (9) 


Hence, ¢(¢) can be written in the form 
&t) = 27 A; esi! (10) 
oes 


where s; is the jth root of Eq. 9 and A; is the 
constant associated with the e°j/term. The be- 
havior of ¢(¢) is thus determined by the values 
for sj. If none of the s; values have roots with 
a real, positive part, then ¢(¢) cannot build up 
with time; whereas, if any of the roots has a 
positive, real part, ¢(¢) will increase indefi- 
nitely with time following a disturbance. Equa- 
tion 9 is called the characteristic equation for 
the system considered, and, as indicated above, 
the time behavior of ¢(¢) is determined by the 
character of the roots. 
Equation 7 can be written also as 


W(s) = t(s) = 1 (11) 


dks) Is+B-Dy ot 
i i 








Written in this manner, it represents the 
Laplace transform of the output, ¢(s), divided 
by the transform of the input, 5k,(s). This ratio 
is defined as the “transfer function” and is 
designated here as W(s). It also is the inverse 
of the characteristic equation of the system. 
Hence the transfer function is directly related 
to the stability of a system. 


Nyquist’s Stability Criteria. After the trans- 
fer function, or characteristic equation, has 
been obtained, the next step is to determine the 
character of the associated roots as a function 
of the coefficients which appear in the equation. 
All possible roots having real, positive parts 
need to be considered; this is done by studying 
the right-half plane (shaded area) of the coordi- 
nate system shown in Fig. 3. The abscissa, 
Rs), represents the real part of a possible 
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Figure 3— Representation of complex s plane. 


root s of Eq. 9, whereas the ordinate, #(s), 
represents the imaginary part of the root s. 
The transfer function W(s) is used in determin- 
ing whether the characteristic equation has any 
roots in the right-half plane. From Cauchy’s 
residue theorem, a closed-contour integral in- 
volving W(s) along some path C equals the sum 
of the residues within the closed contour C. 
Since the residues are associated with the singu- 
larities of W(s), and these in turn occur at the 
zeros of the characteristic equation, a contour 
integral of W(s) along a path C enclosing the 
right-half s plane will have a value only if the 
characteristic equation has a root with a real, 
positive part. 

The function W(s) can be written in the form 


w(s) = a) (12) 


where D(s) is the characteristic equation. The 
zeros of D(s) are of concern here, and therefore 
the contour integral of interest is 


1 .. sum of residues within C (13) 
2ai Jc Ds) 

where C is indicated in Fig. 3 by ¢ going from 
—1/2 to 7/2 and # is approaching ~. Rather 
than dealing with Eq. 13, more information can 
be obtained by considering the value of 


1 D'(s) 


ani Jc Dis) ds (14) 
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where D’(s) = dD(s)/ds. Although the singulari- 
ties of 1/D(s) occur at the zeros of D(s), the 
singularities of D'(s)/D(s) occur at the zeros 
and poles of D(s). Hence, let D be given by 


D(s) = = (15) 


where the values of s which make Z(s) = 0 con- 
stitute the zeros of D(s) and the values of s 
which make P(s) = 0 constitute the poles of D(s). 
Equation 14 then becomes 


1 ¢ D's) 
2mi Jc D(s) 


1 eo F 


where N, is the number of zeros of Z(s), with 
each zero counted according to its multiplicity, 
and N, is the number of poles of Z(s), with each 
pole counted according to its multiplicity. 

Also, Eq. 14 can be integrated to give 





af. d [In D(s)] 


= 5; [In D()| + i0(s)],= 2 (07) 


where |D(s)| is the magnitude of the vector as- 
sociated with the real and imaginary parts of D 
for a given value of s, measured from the origin; 
@ is the angle of the vector associated with the 
real and imaginary parts of D for a given value 
of s, measured from the real axis; and 7 is the 
angle swept out in the D(s) plane as s follows 
contour C. Equations 16 and 17 give 


N, =Ny+ 2 (18) 


where 7/27 can be interpreted as the number 
of encirclements of the origin in the D(s) plane 
as s follows contour C. Thus, by noting the 
number of poles of D(s), if any, and by deter- 
mining the number of encirclements of the origin 
when plotting D(s) as s varies over C, the num- 
ber of roots of the characteristic equation in 
the right-half s plane can be obtained (encircle- 
ments are considered positive when they occur 
in a counterclockwise fashion, with s traced in 
a counterclockwise fashion). The above are 
essentially Nyquist’s stability criteria. Stability 


is associated with those conditions which lead 
to no zeros for D(s) in the right-half plane. 


Frequency-Response Plots. The path that Cc 
follows is the imaginary axis and the extremes 
of the right-half s plane. Under most circum- 
stances, D(s) is a well-behaved -function, and 
encirclement of the origin is associated only 
with movement of s along the imaginary axis. 
Under these circumstances, only the value of 
D(iw) is of concern, where w takes on all values. 
Also, when s = iw, the transfer function W(s) = 
1/D(s) can be interpreted as the steady-state 
response to a sinusoidal input signal having 
frequency w; thus this portion of a Nyquist plot 
is associated with frequency-response data. 

The preceding conditions and relations are 
utilized in the frequency-response plots, or Bode 
diagrams, which essentially plot the amplitude 
of the system transfer function |W(s)| and its 
phase angle as s traverses the imaginary axis. 
Thus, frequency-response plots are a way of 
presenting the information contained in the 
Nyquist plot. 


Autocorrelationand Transfer Functions. The 
autocorrelation function is related to the mag- 
nitude of the transfer function |W(s)|, where s 
lies upon the imaginary axis; however, it does 
not give the associated phase angle. Thus, only 
part of the information given by a frequency- 
response plot is obtained by utilizing the auto- 
correlation function. 

Physically, the autocorrelation function cor- 
relates the value of a function at time ¢ against 
the value at a different time. Thus, if x(¢) is the 
variable, the normalized autocorrelation func- 
tion ¢(7T) is given by 


_ x(t) x(t + 7) 
— 


lim = [" 
_ fae aT Jor 


Boge [a 
fx x(t + 1) dt 
f _ x)? dt 
Equation 19 implies that the statistical charac- 
teristics of x(¢) do not depend on the time of 


observation or that a stationary random process 
is being investigated. Under such circumstances 


x(t) x(t + 7) dt 





(19) 
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the time average is equivalent to an ensemble 
average, where an ensemble consists of an in- 
finite set of similar mechanisms generating 
x(t). The integral of interest in Eq. 19 is 


fr x(t) x(7 + t) dt (20) 
This is related to the transfer function, as in- 
dicated below. 


By means of the Fourier integral, x(t) can be 
written as 


x(t) = x f : X(v) e-¥! dv =F [X(v)]_ (21) 


with 
X(v) = :: x(t) ev! dt =%[x(t)] (22) 


where # represents the Fourier transform and 
g~ represents the inverse Fourier transform. 
It follows that 


x(t) x(7 + t) dt 


= 1 eo f 
a # dat xt | X(v) e-iv(t+t) dy 


=F f- x) e-ivt dv f{- x(t) ei(-v)t at 
= ¥~1[X(v) X(—v)] (23) 


Thus, taking the Fourier transform of ¢(7) 
gives 


F [o(7)] = K X(v) X(-v) (24) 
where 
K"= ad x(t)? at 


The relation between X(v) and the transfer 
function is still required. Since a set of linear 
equations with constant coefficients is being 
considered, the kinetic equations can be written 
in the form 


D (S) x(t) = f(t) (25) 


Where 9(d/dt) is a polynominal in the differen- 
tial operator d/dt and f(t) is the input disturb- 
ance. Performing a Laplace transform on Eq. 25 
gives the transfer function W(s) as 





W(s) = Fs) = D(s) (26) 

So long as the system is stable, b in Eq. 8 

becomes zero, and the Laplace transform es- 

sentially reverts to the Fourier transform; 

thus, for a reactivity disturbance 6k,(¢) having 
Fourier transform 6k,(v), X(v) becomes 


X(v) = W(v) BRe(v) (27) 


where vy is associated with points along the 
imaginary axis. Combining Eqs. 24 and 27 re- 
lates the Fourier transform.of the autocorrela- 
tion function to the transfer function. Magnitude 
alone is given by #[¢(7)]; also, X(v) and X(—v) 
have the same magnitude since one is the com- 
plex conjugate of the other. Thus 


F [0(7)] = K|W(v)|?|5k,(v)|? (28) 


Assuming the spectral power density of the input 
reactivity noise to be independent of frequency, 
|5k-(v)|? is a constant, and therefore the magni- 
tude of the square of the transfer function is 
proportional to the Fourier transform of the 
autocorrelation function. This remarkable rela- 
tion permits information.to be extracted from a 
reactor power trace. Although this relation has 
been used in the past primarily to determine re- 
actor parameters, it may find future use in de- 
termining changes in operating conditions. 


Application to the HRE-2 


During operation of the Homogeneous Reactor 
Experiment (HRE-2), small power oscillations 
of 1 to 2 per cent occurred;' also, small power 
excursions of ~3 per cent or greater occurred 
under conditions associated with loss of fuel 
from solution. By examining the autocorrelation 
function associated with the small power oscilla- 
tions, an estimate® of the relative amplitude of 
the transfer-function frequency response was 
obtained for various operating conditions. The 
results indicated that the shape of the resulting 
curve was dependent upon whether a loss of 
uranium from the fuel solution had taken place. 
It is not clear whether sufficiently long time in- 
tervals were considered in the time averaging 
(hand calculations were performed) or what 
error was introduced by approximating ¢(7) by 
an analytical function. The results indicate, 
however, that this method may prove to be use- 











24 NUCLEAR SAFETY 


ful in ascertaining that undesirable operating 
conditions exist, even though the spectral den- 
sity of the input reactivity noise may not be in- 
dependent of frequency. (Paul R. Kasten) 


Conference on Transfer- 
Function Measurements 


and Reactor Stability Analysis 


On May 2 and 3, 1960, a conference convened 
at ANL on “Transfer- Function Measurements 
and Reactor Stability Analysis” under the pro- 
gram chairmanship of James A. DeShong, Jr. 
Detailed minutes of this conference will be is- 
sued by ANL. There were four sessions: I, 
Transfer-Function Use in Reactor Dynamic 
Studies; II, Thermal Reactor Measurements and 
Analysis of Stability; III, Fast-Reactor Measure- 
ments and Analysis of Stability; and IV, Pile 
Oscillator Reactivity Measurements; and the 
first three sessions had direct bearing on reac- 
tor safety. 


A transfer function describes the output of a 
system, such as a reactor, as a function of the 
input. More specifically, for a sinusoidal input 
of unit amplitude and zero-phase shift, the 
transfer function gives the amplitude and phase 
of the output as a function of the input frequency. 

J. P. Franz of Westinghouse Atomic Power 
Division (WAPD) discussed “Reactor Transfer 
Functions,” particularly for a system in which 
the only nonlinearity is the fact that the rate of 
change of reactor power (or neutron population) 
is proportional to the product of reactivity and 
the already existing power (or neutron) level, 
whereas the power-to-reactivity feedback is 
linear. The method suggested for handling such 
systems involves considering a harmonic reac- 
tivity input 


p=ypsin wt 


applied to a system in which the transfer func- 
tion is obtained by linearizing the kinetic equa- 
tions; the transfer function determines the phase 
shift. The output of the transfer function is then 
fed to a “describing” function, which describes 
the nonlinearity inamplitude. Higher harmonics 
are neglected, a procedure which was said tobe 
justified if the absolute value of the transfer 
function decreases with w, that is, if the reac- 
tor’s attenuation of the input reactivity in- 


creases as the input frequency increases.*® In 
the discussion, Elias P. Gyftopoulos of MIT and 
Z. Akcasu of ANL questioned the omission of 
higher harmonics. 

The relative advantages and disadvantages of 
the transfer-function method of reactor analysis 
were discussed by Gyftopoulos in a paper en- 
titled “Transfer- Function Representation of Nu- 
clear Power Plant Components.” One interest- 
ing point referred to the refinements introduced 
by the nonlinear treatment as compared with the 
linearized equation. The speaker pointed out that 
the refinements are important only when the re- 
activity additions are large, and then distortions 
of the spatial distribution are usually just as 
important as the nonlinearities. The transfer 
functions discussed in the paper were primarily 
those referring to the reactor itself and, toa 
lesser extent, those of the other components. 

The measurement of the power-to-void trans- 
fer function in a SPERT-I channel was described 
by S. Zivi and R. W. Wright of Ramo-Wooldridge. 
This function describes the amplitude and phase 
of the oscillation in steam voids caused by a 
sinusoidal oscillation (of unit amplitude and 
zero phase) in the power input. In the measure- 
ments, the channel, built to be as similar as 
possible to the SPERT-I fuel element, was 
heated electrically, and the voids were measured 
by means of the transmission of soft X rays 
through the steam-water mixture in the channel. 
The transfer function thus measured can then 
be combined with the other transfer functions 
of the system, such as the “zero-power” trans- 
fer function, which describes reactor power and 
its dependence on reactivity input, the “coolant 
flow to void” transfer function, the “void to 
coolant flow” transfer function, etc. The results 
are in qualitative but not quantitative agreement 
with the experimental SPERT-I results, indi- 
cating that the actual reactor depends somewhat 
on phenomena not simulated in the electrically 
heated model.'® Descriptions of the instrumen- 
tation for “High- and Low-Power SPERT-! 
Transfer- Function Measurements” and analyses 
of the results were presented by A. A. Wasser- 
man of Phillips Petroleum Company. 

A paper entitled “Combined Reactor and 
Power System Analysis —— BWR” was presented 
by E. R. Owen of General Electric, San Jose. 
This paper was particularly timely in view of 
the just-completed and eminently successful 
half-power run of the Dresden boiling- water re- 
actor that was built by G. E. Effects discussed 
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included reactor kinetics, the heating of the fuel, 
the thermodynamics of the boiling water, the 
Doppler coefficient, the voids, the flow, etc. 
Components external to the reactor, such as the 
200-ft steam line to the turbine with its com- 
pressible flow, were also discussed. 

Z. Akcasu and J. A. Thie of ANL presented 
a paper on “Methods of Investigating Noisy 
Power Reactors.” The noise in.a reactor is a 
handicap if it is intended to measure the transfer 
function of a reactor with relatively small input 
oscillations of control rods, feed-water tem- 
perature, reflector position, etc. Methods of 
measurement with high noise-to-signal ratios 
were discussed. It was also pointed out that 
noise can be useful as a means of determining 
the transfer function if correlation between a 
noisy input and the resulting output is used. 

A paper entitled “Measurement and Analysis 
of the KEWB Transfer Function by Reactor 
Modulation Techniques” was presented by E. R. 
Cohen and R. N. Cordy of Atomics International. 
By theory and by experiment, Cohen and Cordy 
found that, in a small, reflected reactor which 
is forced into oscillations of a period compa- 
rable to the mean neutron lifetime, the reflector 
neutrons act like a “seventh group” of delayed 
neutrons. The ratio 1/8, where / is the neutron 
lifetime and £ is the delayed-neutron fraction, 
was determined on the KEWB up to 260 cycles/ 
sec. The high-frequency transfer functions were 
different for cadmium-covered and bare 
neutron-flux indicators. 

Stability analyses of the EBWR were dis- 
cussed by W. C. Lipinski of ANL. Transfer 
functions were measurable, under ideal condi- 
tions, to +4, per cent in amplitude and '¥, degree 
in phase. On the “old” EBWR core, the stability 
limit was determined to be at 66 Mw, but a 
slightly larger core that was scheduled for op- 
eration in September is expected to be stable at 
100 Mw. 

J. N. Grace of WAPD presented a paper on 
“Analysis of a Reactivity Instability Experiment 
with Boiling.” The analysis was performed by 
using two regions: the lower one nonboiling and 
the upper one boiling, with the boiling boundary 
fixed. Variation of the boiling boundary was a 
Second-order effect and could be neglected at 
Smaller amplitudes. In addition, digital calcu- 
lations on a 30-region model were performed 
which predicted the observed 5 cycles/sec os- 
Cillation. These oscillations turn out to be 
amplitude-modulated, with a frequency of 


cycle/sec. In the discussion, Z. Akcasu of ANL 
suggested that the modulation may result from 
the situation in which the almost-unstable reac- 
tor acts as a narrow band-pass filter excited by 
its own noise. A second topic by Grace on the 
precession of the flux around the seed of the 
PWR because of nonlinear effects was also of 
interest. 

E. S. Beckjord and W. H. Harker of General 
Electric, San Jose, described “The Dynamics of 
Large Boiling Reactors,” and, in particular, 
their proof that the xenon flux-tilt oscillations 
cannot occur unless the reactor operator applies 
“total power” control, that is, operating all con- 
trol rods together in order to keep the total 
power constant. “Local control,” that is, the 
use of control within a given region to keep the 
power in this region constant, does not result 
in the spatial oscillation. Local control is em- 
ployed, for instance, in the Dresden reactor. 
The proof is based on the assumption that the 
regions in the reactor are coupled only by neu- 
tron flux. 

Another paper from WAPD, “Digital Calcula- 
tions of Spatial Stability Related to PWR,” by 
P. F. Lacy, referred to the spatial oscillations 
in the PWR seed as a result of xenon instability. 
The calculations described the observed effect 
well, but the model used had to be somewhat 
coarser than desirable to make the time- and 
space-dependent calculation possible. 

The papers of the third session all referred 
to fast reactors and were particularly timely in 
this country because of the construction of the 
Enrico Fermi Atomic Power Plant, which will 
go into operation in the near future. As is well 


known,'! the EBR-I, an experimental fast- 
breeder reactor, exhibited a positive power 
coefficient and had an accident during an experi- 
ment, after a long period of satisfactory opera- 
tion. The seriousness of a positive power coef- 
ficient in a fast reactor is aggravated by the 
short mean neutron lifetime. 

The power coefficient in pressurized-water 
and boiling-water reactors” depends largely on 
expansion of the moderator and void formation, 
and these effects are, in principle, generally 
well defined by the type of the reactor. The 
power coefficient in the fast reactor was traced, 
as described -.in great detail in the papers pre- 
sented, to mechanical deformation of the fuel 
elements as a function of reactor power: A fuel 
element in a flux gradient will get hotter on the 
side in the higher flux; it will expand more on 
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that side and will tend to bow, with the convex 
side of the bend toward the higher flux. If this 
bowing makes the reactor more compact, a 
positive power coefficient results. This was the 
case with EBR-I. In this reactor the elements 
were fastened at the top and bottom. 

Other methods of fastening the elements can 
result in negative power coefficients or in sub- 
stantially lower positive power coefficients. The 
fact that the bowing is responsible for the tend- 
ency toward instability was demonstrated by 
constraining the elements by means of ribs, 
which gave a nuclearly very stable reactor; then 
some of the ribs were sheared off, andthe tend- 
ency to instability, as exhibited by the behavior 
of the transfer functions, returned. The matter 
is somewhat complicated by the fact that the 
constraints may allow “limited bowing” at small 
amplitude but wiil prevent large deflections. 
Also, if the experimental transfer functions were 
extrapolated to zero frequency, one would ex- 
pect to find the static temperature and power 
coefficients; however, this was not the case, 
probably because of very slow effects such as 
vessel expansion or time delays in the secondary 
system. These effects were too slow to be de- 
tected, even with the lowest frequencies used in 
the transfer-function measurements. 

The general conclusions of the speakers in the 
third session were that (1) the positive power 
coefficients are understood in principle and can 
be dealt with, and (2) the fast reactor can be con- 
structed with predictable nuclear stability. The 
papers presented were as follows: “Oscillator 
Tests in British Fast Reactors,” A. R. Baker, 
UKAEA, Harwell; “Progress in Frequency- 
Response Measurements at Los Alamos,” R. M. 
Kiehn, Los Alamos Scientific Laboratory; “Re- 
cent EBR-I Stability Studies,” R. R. Smith, ANL; 
“Analysis of the Power Feedback Relations in 
the Enrico Fermi Reactor,” F. Storrer, Atomic 
Power Development Associates; and “Kinetics 
Studies on EBR-I and EBR-II,” D. Okrent, ANL. 

(W. K. Ergen) 


Argonne Transient Reactor 
Test Facility (TREAT) 


The acronym TREAT refers to a homogeneous 
uranium-graphite reactor that has been designed 
to test fast-reactor fuel elements to meltdown 
during a self-limiting fast transient. The core 
is protected from damage during the excursion 


by its relatively high heat capacity, and the ex- 
cursion is controlled by the negative tempera- 
ture coefficient of the core. The need for this 
kind of test information is established by noting 
that the consequences of core meltdown com- 
prise the largest set of unknown factors in 
evaluating fast-reactor safety. 

The physics analysis of the TREAT design” 
was summarized in the June 1960 issue of 
Nuclear Safety.“ This facility has also been dis- 
cussed in a paper presented at the second 
Geneva Conference,'® a hazards summary re- 
port,'® a postcriticality study,!’ and several 
papers'*-2? presented at American Nuclear So- 
ciety meetings. Initial results of meltdown tests 
on EBR-II fuel pins were described in the June 
1960 issue of Nucleonics.** Some of the design 
parameters are indicated in the following: 


4x5x5 
8 x 1014 x 10'4 


Nominal core size, ft 
Reactor dimensions, ft 


Carbon-to-U?* ratio 10,000 
Excess reactivity with no slots or 
holes 0.19 


Control-rod worth (central 8 rods) 0.28 

Average integrated neutron flux 
during excursion, neutrons/cm? 

Final average graphite tempera- 
ture, °C 235 


4 x 1045 


—Okeff in temperature coefficient,% 4.2 to 5.9 
Minimum reactor prompt period 
(self-limiting), msec 30 to 40 


Peak flux, neutrons/(cm’)(sec) ~10!? 
Neutron lifetime, sec 8.55 x 1074 
Steady-state power (maximum), kw 100 
Maximum transient energy 

release, Mw-sec 1000 


The first set of experiments" performed on 
the reactor yielded a neutron lifetime value of 
8.8 x 10 sec and a temperature coefficient of 
1.8 x 10~4 over a range of 20°C. Other measure- 
ments of the temperature coefficient!® gave re- 
sults as high as 2.1 x 10‘, Some of the obser- 
vations made during these first experiments are 
listed below: 


Criticality 

increment, Peak power, 
% Mw Remarks 
0.4 2.5 Subprompt critical 
0.6 8.1 Subprompt critical 
0.8 43.0 Superprompt critical 


The power vs. time curve develops a narrowing 
symmetrical peak as the criticality increment 
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increases in value, reflecting the diminishing 
effect of the delayed neutrons. 

A two-stage program” of meltdown experi- 
ments has been developed to obtain needed data 
on the characteristics of the reactor and to pave 
the way to full-scale testing of fast-reactor fuel 
elements. These experiments will be carried 
out with single, uncooled, unirradiated EBR-II 
Mark I type fuel pins. Some of the first results 
of these single-element meltdown tests are sum- 
marized as follows: 


Maximum 
temperature, 
°C Condition 
530 No damage 
675 No damage 
820 Void in bond 
860 Void in bond 
887 Void in bond 
945 Helical void in bond 
950 Penetration of cladding by uranium 
960 Helical void in bond 
965 Helical void in bond 
980 Void in bond 
1000 Eutectic coating on fuel; no pene- 
tration of cladding 
1000 Uranium melted through bottom; 
no evidence of violent disinte- 
gration 
1015 Vigorous penetration 
21030 Violent disintegration; molten ura- 


nium ejected from element 


The EBR-II fuel specimens tested?’ consisted of 
uranium castings containing 5 per cent “fissium” 
alloy in concentric stainless-steel tubes. The 
alloy and cladding were bonded with sodium, and 
the containing capsule was filled with helium at 
latm. The enrichments ranged from normal to 
6 per cent U**>, which is lower than the 49 per 
cent to be used in EBR-II, a fast reactor, but 
the enrichment is ample for TREAT, a thermal 
reactor. Experiments with fuel-rod clusters are 
being planned. It is the opinion of the reviewer 
that the experiments performed thus far confirm 
the original design concepts. (P. H. Pitkanen) 
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Safety System Interconnections 
Between Experiment and Reactor 


When the first test reactors were designed, 
much thought and attention were given to the 
layouts and logical designs of the safety sys- 
tems that would shut down the reactors on the 
occurrence of any dangerous situation within 
the core. It was not realized until much later 
that large-scale experiments to be performed 
within a reactor had potentially dangerous con- 
ditions associated with them and that the con- 
trol and safety systems required for the ex- 
perimental facilities were, in many cases, more 
complex, more expensive, and more prone to 
trouble than the control and safety systems as- 
sociated with the reactor. Since most test re- 
actors can have several experiments operating 
simultaneously, the resulting complexity of ex- 
periment controls and the failures normally 
associated with such equipment can give rise to 
an intolerable amount of trouble from malfunc- 
tion and false operation of the experiment con- 
trol and safety systems. 

Handbooks!~* have been prepared to guide 
experimenters at four of the large, presently 
operating, test reactors. These reactors are 
the Materials Testing Reactor (MTR) and the 
Engineering Test Reactor (ETR) at the National 
Reactor Testing Station in Idaho and the Low 
Intensity Test Reactor (LITR) and the Oak Ridge 
National Laboratory Research Reactor (ORR) 
at Oak Ridge, Tenn. The systems described 
in the handbooks are quite similar; a typical 
system, the one in use at the ORR and the 
LITR, is shown diagrammatically in Fig. 4. 
For each experiment a decision must be made 
as to which process variables, if any, must be 
used as bases for shutting down the reactor if 
their values show potentially dangerous condi- 


tions. For each such variable, it must then be 
determined what the time response of the nec- 
essary reactor shutdown must be. In each of 
these reactors, more than one mode is available 
by which to shut down the reactor. These modes 
vary in the speed with which the reactor is shut 
down and also in the ease with which full power 
may be recovered after the reactor shutdown 
signal is cleared, either because the process 
variable no longer is in the dangerous range or 
because the signal was false to begin with. 
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CONTACT D OPENS TO SHUT DOWN REACTOR 


Figure 4— Typical double-track reactor shutdown 
from an in-pile experiment. (The system shown is 
the type used at the ORR and the LITR.) 


It is apparent from studying the handbooks!~’ 
that there is a significant history of false shut- 
downs from reactor experiments. A very high 
premium is therefore placed upon use of one of 
the less drastic modes of reactor shutdown in 
cases where the time response of this alternate 
mode is adequate. In rare cases, a single 
process variable will have associated with it 
more than one mode of reactor shutdown, but 
usually the extra false shutdowns generated in 
the extra equipment more than compensate for 
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the possible added advantage of having the less 
drastic action available. For each mode of re- 
actor shutdown, a double-track electrical sig- 
naling system interconnects the experiment 
control and safety system with the reactor con- 
trol and safety system. This is done so that a 
single failure in this vital interconnection can- 
not paralyze the necessary action. 

In the MTR and ETR systems, both the paths 
in the double-track link from the experiment to 
the reactor control system are provided with 
relays that close in the event of trouble, but 
they are arranged so that they will not give sig- 
nals upon the loss of power to the experiment 
control system. In this event, a separate moni- 
tor ensures that the reactor will be shut down 
when all control power to the experiment in- 
strumentation is lost. This is done to avoida 
false shutdown from momentary dropout of the 
relays involved. On the other hand, in the LITR 
and ORR systems the two tracks in the link 
have opposite aspects, as shown in Fig. 4. 
Energizing one circuit or deenergizing the other 
circuit will transmit the desired signal to the 
reactor control system. This is done so that 
common failures of both tracks in the link will 
not paralyze the entire system; the loss of ex- 
periment power will activate one track. 

Both systems provide adequate safety, al- 
though the ORR and LITR systems appear to 
have some advantage in simplicity and in lower 
susceptibility to common failures that might 
affect both tracks simultaneously. In any event, 
the two-track concept is essential to both sys- 
tems. To ensure reliability, it is necessary for 
the instruments in the experiment safety sys- 
tem, as well as those in the interconnection, to 
be double-tracked so that the correct operation 
of the system will never be dependent upon a 
single component. It is vital to the system that 
the two channels of information and control be 
truly independent so that they will not be prone 
to a common failure whereby both channels are 
inoperative for the same reason. Although 
double-tracked channels will provide a greater 
degree of assurance in obtaining a safety ac- 
tion when needed, the probability of false safety 
actions is also increased. For this reason, 
careful examination of the number of parame- 
ters that can cause reactor shutdown is essen- 
tial in order to reduce unnecessary shutdowns 
to a minimum. It is also clear that a controller 
must not be used for any safety function since 
the failure of such an instrument will change 


the variable which it controls, in many cases 
toward the dangerous values, at the same time 
that the safety function is paralyzed because of 
failure of the same instrument. 

These precepts of redundancy and independ- 
ence may seem self-evident now, but it is ap- 
parent from references 1 to 3 that they have 
been developed with some difficulty. Standard 
procedures and accepted good practice have 
been described in considerable detail so that 
new experiments may be designed to conform 
in these respects to those already in progress, 
and the maintenance and operating personnel 
need not be confronted with a variety of differ- 
ent schemes. It is clear that both of the organi- 
zations responsible for the operation of these 
test reactors place a high premium on strict 
conformance to established practice in order 
to ensure smooth operation of their facilities 
without impairment of the necessary safety. 

(S. H. Hanauer) 


A Pneumatic Temperature Probe 
for Gas-Cooled Reactors 


Pneumatic probes for the determination of 
gas temperatures were described by Schmick' 
and Cassan’ as early as 1929. The major de- 
velopmental work did not take place, however, 
until after World War II and the advent of the 
jet engine. The pneumatic temperature probe, 
also referred to as the thermodynamic or total- 
temperature probe, is a rather novel system of 
measuring the temperature of a high-velocity 
high-temperature gas. In this service, it has 
many advantages over thermocouples. The 
pneumatic probe is not affected by radiation or 
convection; it measures total temperature, in- 
cluding that resulting from velocity; it samples 
a small, well-defined area; and, with proper 
cooling, the range can be extended to above 
4000°R. 

The design operating temperature of a gas- 
cooled reactor is, in general, limited by the 
safe operating temperature of the fuel elements.’ 
In order to obtain optimum performance of the 
reactor, it is therefore desirable to operate all 
the fuel channels as close to the design tem- 
perature as possible. The safest way to do this 
is to measure either the fuel-element tem- 
perature or the fuel-channel-outlet gas tem- 
perature and to regulate the gas flow through 
each channel to give the desired fuel-element 
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temperature. Since, at the temperatures of in- 
terest, thermocouples do not have adequate 
reliability over the expected core life, it ap- 
pears that the pneumatic temperature probe is 
well matched to the needs of a gas-cooled re- 
actor. 

The basic advantages of the pneumatic tem- 
perature probe have made it a very useful in- 
strument for obtaining jet-engine exhaust tem- 
perature profiles and other measurements of 
importance to jet-engine evaluation.’-!! A pneu- 
matic probe was used recently in England to 
evaluate the performance of open-hearth fur- 
naces in the steel industry.!2.13 

The pneumatic temperature probe is, simply, 
a tube which has two flow restrictions (see 
Fig. 5). Hot gas is passed through the first 
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Figure 5—-Typical pneumatic temperature probe. 


restriction and then cooled. The second re- 
striction is used to measure the mass flow 
rate through the first. When both the pressure 
and the mass flow rate are known at a restric- 
tion, the temperature can be determined through 
the use of the flow equation. A simplified sys- 
tem can be obtained by designing the restric- 
tions so that the ratio of the throat pressure to 
the inlet pressure is less than the critical value 
for the gas used. This will produce “sonic flow” 
in the throat and eliminate the necessity for 
measuring the differential pressure at each re- 
striction since the flow rate under these condi- 
tions will be dependent on upstream pressure 
alone. A further advantage can be gained by 
using a convergent-divergent nozzle as the re- 
striction so that the coefficient of discharge 
will not change as the pressure ratio is de- 
treased below the critical value. This type of 
restriction will also give good pressure re- 
Covery, usually of about 80 per cent. 

The mass flow rate, W, for a critical flow 
nozzle is given by the equation 
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where A is the nozzle area, P is the inlet pres- 
sure, T is the inlet temperature, R is the gas 
constant, y is the ratio of specific heats (C,/C,), 
and P,/P, is the critical pressure ratio. Sub- 
scripts i and ¢ refer to inlet and throat pres- 
sures. Equating the mass flow at each nozzle 
and solving for 7; (refer to Fig. 5) gives 
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where C is the coefficient of-discharge and 
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Equation 2 can be further simplified by grouping 
the constants: 





T; = KT)(P;/P2)* 


where K, the calibration constant, is 


re (ed) 
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If T, is controlled at a fixed value, which can be 
done with a small heat exchanger, the measured 
temperature becomes a function of a pressure 
ratio. 

Typical probes are from ', to 1 in. in diame- 
ter, with nozzles 0.1 to 0.030 in. in diameter at 
their throats. The geometry of the nozzle is not 
critical. A quadrant of acircleor ellipse serves 
very well as the approach section, as will a hy- 
perbolic curve. The throat should be one throat 
diameter down from the entrance. For the di- 
vergent section, either a straight or a slightly 
curved section works equally well. The nozzle 
should be constructed of a hard material so that 
changes in flow characteristics caused by ero- 
sion will be minimized. Because of the many 
factors appearing in the equation as squared 
terms, very careful application of the device is 
necessary if reasonable accuracy is to be ob- 
tained. Large temperature differences between 
the first nozzle and the gas will result in heat 
transfer to the gas and will cause nonisentropic 
expansion. Another source of error would be a 
change in mags flow rate after the first nozzle. 
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This could be the result of a leak, a chemical 
reaction in the gas, or condensation in the cooled 
tube. Thermal expansion of the nozzle will re- 
sult in errors of several per cent if it is not 
considered. As an indication of the tolerances 
required, an over-all accuracy of 2 per cent 
would require that (1) the pressure ratio be 
measured to within 0.75 per cent, (2) 7, be con- 
trolled to within 0.5 per cent, and (3) the cali- 
bration constant be known to within 0.75 per 
cent. The calibration constant will vary if the 
physical properties of the gas change or if the 
geometry of the nozzles is altered. A simple 
method of calibration can be achieved by making 
T,; and T, the same temperature, as would be 
the case if both were at room temperature. 
From the equation it can be seen that, if 7; is 
equal to 7,, the value of the calibration constant 
will be equal to the square of the pressure ratio. 


In view of the apparent suitability of the pneu- 
matic temperature probe for the determination 
of temperatures in a gas-cooled reactor, it is 
now intended to provide such a measurement on 
the outlet of all channels from the core of the 
Experimental Gas-Cooled Reactor (EGCR). The 
pneumatic temperature system in the EGCR will 
utilize the piping for the fuel-cladding-rupture 
detection system. 


The rupture detection system in the EGCR 
will have a 0.4-in.-OD stainless-steel tube run- 
ning from the outlet of each fuel channel toa 
valving manifold. There will be a nozzle in- 
stalled in each of these tubes near the fuel chan- 
nel which will serve as the entrance nozzle for 
temperature measurement. The valving mani- 
fold will sample two channels simultaneously. 
One sample will be routed to a radiation detec- 
tor for rupture detection, and the second sam- 
ple will be taken through a heat exchanger and a 
second nozzle to complete the pneumatic tem- 
perature system. The upper plenum pressure 
will be taken as P;, and the pressure P, will be 
measured just before the second nozzle. Since 
the temperature of the gas entering the second 
nozzle is to be controlled, the fuel channel exit 
gas temperature will be a function of only the 
pressure ratio P,/P,. Because of the experi- 
mental nature of the pneumatic system, conven- 
tional thermocouples will be installed in each 
channel to serve as a backup and to provide a 
means of evaluating the pneumatic temperature 
probe as a gas-cooled-reactor temperature 
monitor. (T. L. McLean) 


Electric Power Systems 
of Nuclear Power Plants 


The electric power system of a nuclear power 
plant is important both for the distribution to 
the external grid of the power produced in the 
plant and for the continued functioning of essen- 
tial equipment in the facility in the event ofa 
failure in any part of the system. These two 
functions establish a requirement for reliability 
of the electrical connections to, and the distribu- 
tion system within, a nuclear power plant which 
is seldom matched in industry. 


There is an economic incentive for delivering 
uninterrupted power to the consumer, and there- 
fore at least two connections to the electrical 
grid are required in order to minimize outages 
from external failures. Furthermore, the con- 
tinued operation of a nuclear plant following the 
failure of any single electrical bus within the 
plant requires multiple buses and judicious di- 
versification of the electrical loads within the 
plant. 

Power must also be available at all times to 
essential equipment (such as shutdown and emer- 
gency cooling systems, ventilation equipment, 
and filtering systems), which is provided either 
to prevent the occurrence of serious accidents 
or to minimize the consequences thereof. The 
need for dependable sources of power for in- 
struments and control systems is even more 
obvious since the loss of this power would ne- 
cessitate costly shutdowns, if not serious acci- 
dents. Thus, in addition to one or more ex- 
ternal power lines, most nuclear plants must 
include one or more sources of emergency 
power, such as batteries and diesel-driven gen- 
erators. 

Although dependability of the power sources 
is a requirement common to all types of nuclear 
power plants, the type and complexity of the 
electric power systems may vary to a great ex- 
tent from one facility to another. In particular, 
the urgency of the need for emergency cooling 
influences the electric system designs of the 
various plants. An attempt is made here to de- 
scribe the electric power systems of presently 
operating and currently planned nuclear power 
plants and to evaluate their reliability. No at- 
tempt has been made to evaluate the power sys- 
tems with respect to the presumed requirements 
of the various plants. The descriptions of the 
electric systems were taken from hazards re- 
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ports. It must be emphasized, however, that 
most of the hazards reports from which data 
were extracted are preliminary. In many cases 
the description of the system is incomplete, and 
there may be significant changes in the designs 
before the facilities are placed in operation. 


The principal features of the various electric 
systems are presented in Table III-1, and each 
system is discussed in this review, except the 
Saxton Reactor Facility, the Small Pressurized- 
Water Reactor, and the Vallecitos Boiling-Water 
Reactor. The available information on the elec- 
tric power systems for these plants was insuf- 
ficient to permit comparable discussion. 


Shippingport Atomic Power Station (PWR)!4 


The primary power supply to the PWR con- 
sists of two 138-kv transmission lines originat- 
ing at the Phillips generating station of the 
Duquesne Light Company and one 23-kv trans- 
mission line running to a system junction with 
the Phillips generating station and the power 
system of the Pennsylvania Power Company. 
The 23-kv line is normally open and canbe used 
to provide emergency power by manual switch- 
ing. The two primary lines occupy essentially 
separate rights-of-way and form a closed loop 
with the Shippingport Atomic Power Station asa 
junction point. The junction consists of a solid 
138-kv bus from which one feeder is connected 
to a 138/2.4/2.4-kv three-winding transformer, 
and another feeder is connected to a 138/15.5-kv 
transformer that has its low-voltage side con- 
nected to the turbine-generator, as well as to 
a 15.5/2.4/2.4-kv three-winding transformer. 
The four 2.4-kv windings of the three-winding 
transformers feed into four individual buses. 
Normally open tie breakers permit the conver- 
sion of the setup to a two-bus arrangement if 
required. Each of the four main coolant pumps 
is connected to a separate 2.4-kv bus. Allother 
power needed for the reactor and auxiliary equip- 
ment emanates from the same four 2.4-kv buses 
in pairs of feeders connected to transformers 
arranged to provide a bus system arrangement 
Similar to that for the primary 2.4-kv sources. 


The unique features of this electric system 
arrangement are the use of a solid primary bus 
and the consistent pattern applied for all sub- 
System distribution. The loss of one 138-kv 
transmission line does not require any automatic 
or manual switching, and the prevailing condi- 
tions of plant operation are not altered in any 


way because the remaining transmission line 
and the plant turbine-generator provide uninter- 
rupted power for all plant requirements. The 
loss of both 138-kv transmission lines could be 
alleviated by manually closing the 23-kv emer- 
gency transmission line, which can be fed from 
the Pennsylvania Power Company system in the 
event that the Duquesne Light Company system 
becomes completely dead. Automatic transfer 
of this line is not required because there is am- 
ple time available before damage can occur to 
vital equipment. A diesel-driven generator is 
available to provide emergency power in case 
of complete plant isolation from the outside 
power systems. Here again, only manual start- 
up of the diesel-driven generator is required. 
A second diesel-driven generator might be de- 
sirable as an additional precaution, but the past 
history of the tie lines is good, and the prob- 
ability of a simultaneous failure of the tie lines 
and the diesel-driven generator is small. 


The reactor control system makes use of 120- 
volt a-c power, with source transfer circuitry 
in case of a failure, and the safety system is fed 
from a 125-volt battery that is backed up by an 
emergency battery. Theturbine-generator plant 
also uses 125-volt d-c power from its own bat- 
tery, which is backed up by the same emergency 
battery as that for the safety system. 


Consolidated Edison Thorium Reactor 
(Indian Point)!5 


Power for the auxiliary equipment of the 
Indian Point station is supplied from four lines, 
each of which feeds into one of the four sections 
of the 13.8-kv auxiliary bus. Three of these 
lines originate at a three-section 138-kv bus at 
a nearby substation; normally closed automatic 
tie breakers permit sectionalizing of the bus as 
needed. The fourth line is connected to the plant 
generator. Switching facilities are provided for 
interconnections of the 13.8-kv bus sections. 
Three 138-kv transmission lines feed the high- 
voltage bus ‘sections. Two of these lines inter- 
connect with a common remote junction, andthe 
third connects with an independent power sys- 
tem. Power for control of the reactor and for 
operating its safety system is derived from 
three battery-operated motor-alternators, one 
of which is equipped with an additional steam 
turbine drive. Two batteries are provided, and 
the power supplies for the battery chargers and 
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essential loads are well diversified. Circuit- 
breaker control is from the batteries. 


This system permits reliable diversification 
of essential loads. It is noted, however, that the 
feeder lines and some of the transmissicn lines 
use common rights-of-way. Furthermore, there 
seems to be no provision for emergency power 
for the decay-heat cooling pumps in the event 
all external primary power sources fail. 


Yankee Nuclear Power Station (Yankee) /é 


‘ Two 115-kv transmission lines and the plant 
generator connect to a common high-voltage bus 
at the Yankee plant. A feeder from each incom- 
ing line and from the plant generator energizes 
the three-section main distribution bus, whose 
normally open tie breakers may be closed man- 
ually. The 480-volt distribution bus also con- 
tains three sections that are fed from feeders 
originating at the three incoming 2400-volt lines. 
Their tie breakers also are normally open and 
may be closed manually. The main characteris- 
tic of this arrangement for power distribution 
is the temporary reduction in reactor power 
level upon loss of one transmission line until a 
manual transfer of vital equipment to another 
bus section can be made. A diesel-driven gen- 
erator provides power in case of a complete 
loss of primary auxiliary power. 


Vital control power is obtained from a battery- 
driven dc-ac alternator, withanalternate emer- 
gency source from the 480-volt plant system. 
Two 125-volt batteries provide d-c power for 
station requirements. 


Only one dc-ac alternator is provided, with 
transfer to the emergency feeder being manual. 
The reviewer questions the reliability of this 
system for continuous power production, since 
there would be a temporary interruption of vital 
control power during transfer to the emergency 
power supply. Any interruption of control power 
presently results in immediate scram of the 
reactor. Alternative arrangements are being 
evaluated in order to provide improved opera- 
tional reliability. 


Nuclear Merchant Ship Reactor 


(N.S. Savannah)!7 


The N.S. Savannah, being mobile, must pro- 
vide all its own auxiliary power for safe opera- 
tion. Power is normally supplied by two turbine- 
generators feeding into a two-section bus with 


a normally closed tie breaker. The loads are 
diversified among a number of load centers, 
each center being connected to both main aux- 
iliary bus sections through an automatic trans- 
fer arrangement. Two diesel-driven generators 
are automatically connected to the main auxiliary 
bus sections in case of unavailability of the 
turbine-generators. Also, an emergency diesel- 
driven generator located on the navigation deck 
is connected to an independent emergency bus 
(which is provided with switching facilities to 
the main auxiliary buses), as well as to load 
centers that supply the primary coolant pumps, 
pressurizer heaters, and other critical compo- 
nents inside the containment vessel. 

The essential reactor components are ener- 
gized through automatic transfer switching cir- 
cuits to permit their operation from either bus 
section. Since one turbine-generator has insuf- 
ficient capacity for the normal electrical load, 
provision is made for automatic starting and 
paralleling of the two 750-kw diesel generators. 
In keeping with marine practice of multiple al- 
ternative means of power supply and distribu- 
tion, the plant can operate with one bus section 
available, although reduction in reactor power is 
necessary. If automatic transfers are needed, 
it would be more reliable to runthe system with 
the bus tie breaker open, provided that the sepa- 
rate system frequencies can be tolerated and 
that each turbine-generator can carry all the 
load. 

The critical loads, such as control, safety, 
and nuclear instrumentation, are connected to a 
120-volt a-c bus that is connected to two dc-ac 
alternator sets backed up by a 125-volt battery. 
One alternator is a standby. The battery floats 
on its bus, which is energized by two ac-dc 
motor-generator sets, each with its feeders 
connected to separate 450-volt a-c bus sections. 

Since one of the dc-ac motor-generator sets 
is termed a standby, the failure of the set in op- 
eration would temporarily deenergize the safety 
system and shut down the reactor. Parallel op- 
eration of the two sets would be preferable, and 
subsequent information states that this is to be 
the normal mode of generation. 


Dresden Nuclear Power Station (Dresden)!® 


Auxiliary power for the Dresden plant is fur- 
nished by two transformers, one connected to 
one section of a two-section 138-kv bus and 
the other connected to the station generator 
leads. The generator in turn is connected to 
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the second section of the 138-kv bus via a 
transformer. Primary power to the high- 
voltage bus, which has a normally closed tie 
breaker, is provided by five transmission lines, 
two of which follow one right-of-way and the 
other three follow another right-of-way. Two 
4.1-kv load centers are selectively connected to 
the two auxiliary power transformers, and all 
the essential loads of either center are auto- 
matically transferred to the other in the event 
either transformer fails. If both the trans- 
formers were to fail or if all the 138-kv trans- 
mission lines were to fail, a standby 34.5-kv 
emergency line would be automatically con- 
nected to one of the main load centers, and, at 
the same time, an emergency diesel-driven 
generator would be automatically started and 
kept in readiness. The diesel-driven generator 
would automatically be connected to the 480-volt 
system if the emergency line should also fail. 
The 480-volt system contains two load centers, 
each having two main buses with a tie breaker. 
Each load-center bus section is connected 
through its own transformer to the 4.1-kv bus 
sections. The whole system should be capable 
of supplying reliable auxiliary power at all 
times, the only concern being the reliability of 
the automatic transfer equipment and the con- 
sequences of its failure to perform as expected. 


Power for critical control and safety circuits 
is available from two ac-ac alternators con- 
nected to two normally separated distribution 
buses. Failure of one alternator would necessi- 
tate manual transfer of the affected bus to a 
station source. A 125-volt battery is provided 
for station requirements. The system is well 
designed for assuring continuous power, and, in 
conjunction with the station battery, it should 
provide the necessary reliability for operation 
and control. 


Elk River Reactor (Elk River)!9 


The 13.8-kv plant generator at the Elk River 
plant is connected through a transformer to a 
solid 69-kv bus. This bus also supplies a 69- 
kv/480-volt plant reserve transformer. Al- 
though not indicated on the reference material, 
the bus is further firmed up by two 11.5-Mw 
steam-driven generators. Auxiliary power is 
normally furnished by a 13.8-kv/480-volt trans- 
former connected directly to the plant generator 
and is distributed from a 440-volt station serv- 
ice bus through two main switchgears. Power is 


fed from this station service bus through a sin- 
gle circuit breaker to a tie point from which the 
circuit splits into two branches, each of which 
is connected to one of the two switchgears 
through a separate breaker. The circuit that 
connects the main auxiliary power transformer 
to the tie point is a feeder section common to 
both switchgears. In the event of failure of the 
normal auxiliary supply, the two main switch- 
gears are transferred to the plant reserve 
transformer through a switching arrangement 
identical to that of the main auxiliary supply. 
Loss of both supplies is backed up by the auto- 
matic starting ofa diesel-driven generator. The 
system contains several features. that the re- 
viewer ‘considers to be undesirable: 


1. The transfer from one auxiliary source to 
the other involves a temporary loss of all aux- 
iliary power, possibly a complete loss, if the 
transfer should fail. 

2. A failure in the common feeder circuit re- 
quires the transfer of all loads to the other 
source. 


With the indicated redundancy of external power 
sources, a more reliable system from the 69-kv 
bus down could have been accomplished, and the 
need for automatic transfer and dual purpose 
feeder sections could have been avoided. 


Power to essential instrument and reactor 
control circuits is supplied from a battery- 
driven dc-ac alternator set. An automatic throw- 
over to a station supply is provided in case of 
alternator shutdown or failure. 


In the most recent hazards report, Final Haz- 
ards Report for the Elk River Reactor (July 8, 
1960), the results of power failure are described. 


In case of loss of power from both electrical 
services, the superheater auxiliaries will trip, 
resulting in a four-rod scram placing the reac- 
tor on hot standby. Since the battery power sup- 
ply provides power to control-rod clutches and 
instruments, the remaining rods will not scram. 
In a few seconds after the power interruption, 
the engine generator will provide power to Motor 
Control Center No. 3, which supplies power to 
all essential reactor auxiliaries, such as the 
shield cooling pumps, purification system 
pumps, air monitor vacuum pump, and control- 
rod motors. 


Depending on the cause of the power inter- 
ruption, the reactor can be shut down, at the 
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operator’s discretion, by inserting the remain- 
ing rods. 


Pathfinder Atomic Power Plant (Pathfinder)2° 


Auxiliary power is provided at the Pathfinder 
plant by a stepdown transformer from the solid 
115-kv bus and also by a stepdown transformer 
connected to the 13.8-kv generator leads. The 
generator output is stepped up and connected to 
the high-voltage bus. Two transmission lines, 
each with independent rights-of-way, connect 
the plant with the Northern States Power Com- 
pany system. A bypass and disconnecting switch 
is provided, apparently to assure emergency 
power in case of a 115-kv bus fault. The refer- 
enced document”? does not indicate the existence 
of any other power sources. Internal emergency 
supplies would be required in the event of total 
primary power failure, an occurrence which 
must be considered possible. Were the bypass 
switch mentioned to be an oil circuit breaker, it 
would save time in switching. The reviewer 
believes that the reliability of the auxiliary 
power sources should be improved by providing 
an additional independent source. No informa- 
tion was presented on the provisions for assur- 
ing power for the reactor control system. 


Humboldt Bay Power Plant (Humboldt Bay)”! 


The arrangement of the bus structure and the 
number of incoming lines for the Humboldt Bay 
plant have not been documented, although in any 
event power is available from two existing con- 
ventional units atthe same site. Auxiliary power 
is normally obtained from the station generator, 
which feeds into a solid bus. 

An emergency diesel generator that supplies 
a 480-volt bus is furnished to supply power to 
those auxiliaries required for safe shutdown of 
the plant. Loss of voltage from the 480-voit bus 
supplying these auxiliaries automatically trans- 
fers the load to a -480-volt bus being supplied 
from either of the two existing generator units, 
and simultaneously the emergency diesel gen- 
erator is started and kept in readiness. If this 
bus cannot supply the load or is not energized, 
then the load is transferred to the already run- 
ning diese] generator. 

A preferable a-c system, composed of two 
separate buses and two ac-dc motor generators, 
is used to supply power for reactor instrumen- 
tation, safety circuits, and annunciators. Asta- 
tion battery provides the d-c power required. 


Boiling Nuclear Superheater Reactor 
(BONUS)22 


At the BONUS plant, two 115-kv transmission 
lines connect to the primary bus system, which 
consists of main and transfer buses into which 
the station generator feeds through its trans- 
former. From this system, two service trans- 
formers, with both transformers operating in 
parallel, supply auxiliary power to a solid 4.1- 
kv bus. From this bus, two feeders with trans- 
formers that also operate in parallel are con- 
nected to one section of a double-ended bus 
whose tie breaker is normally closed. The other 
bus section provides the power for the essential 
shutdown loads and can be connected to an emer- 
gency diesel-driven generator. Operating the 
feeders in parallel increases the reliability of 
the system. It is understood that electrical 
storms are rather severe in the area in which 
this reactor is located and that such storms 
could disrupt both incoming lines simultane- 
ously, andtherefore the internal plant emergency 
power reliability assumes greater importance. 


A battery furnishes the required d-c power. 
The reactor control and safety system is oper- 
ated from a 120-volt a-c bus that is normally 
connected to the 4.1-kv bus through a single 
transformer. A standby feeder and transformer 
from the 480-volt system is automatically con- 
nected to the 120-volt bus in the event of failure 
of the normal feeder. This arrangement is be- 
lieved to be undesirable with regard to the con- 
tinuous production of power for the following 
reasons: (1) control power should not be lost at 
any time; (2) there is only one on-line source of 
control power so that it will scram the reactor 
in the event of the failure or temporary inter- 
ruption of that power source. 


High Power Density Reactor Plant 
(Big Rock Point)? 


The auxiliary and control power system for 
the Big Rock Point plant is identical to that of 
the Humboldt Bay Power Station, described 
previously. 


Hallam Nuclear Power Facility (Hallam)?4 


External power sources have not yet beende- 
scribed in the hazards reports for the Hallam 
plant. The solid 4.1-kv auxiliary power distri- 
bution bus is normally supplied from a station 
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transformer with an alternate normally open 
feeder from a reserve station transformer, as 
an emergency source, through an automatic 
transfer breaker. Three 480/277-volt switch- 
gear sections are connected to the main bus 
through individual transformers. Two of these 
sections have a common tie breaker that is nor- 
mally open and will automatically close if either 
of the transformers associated with the two sec- 
tions fails as a source. Adiesel-driven genera- 
tor is automatically connected to one of these 
two sections in the event both transformers fail 
as supplies. The reviewer believes that the main 
weakness of this arrangement is that too much 
reliance is placed on the ability of automatic 
transfer equipment to perform with reproducible 
time delays and actions. It is likely that atsome 
time the transfer might not take place or that it 
might provide enough time delay to permit all 
contactors to drop open. In either event the 
supply for critical loads would be lost, and the 
reactor would be scrammed unnecessarily. An- 
other weakness is that a bus fault on the 480- 
volt section associated with the diesel-driven 
generator could make this emergency power unit 
unavailable when needed. 


A single 480-volt feeder supplies the vital 
control center from which three battery chargers 
(one a standby) connect to two separate 250-volt 
d-c buses. A floating station battery and a dc- 
ac alternator set are associated with each ofthe 
d-c buses. The adequacy of only one feeder for 
the vital distribution center is questionable. 


Enrico Fermi Atomic Power Plant 
(Enrico Fermi)25 


Two incoming 120-kv transmission lines con- 
nect to the two-section high-voltage bus at the 
Enrico Fermi plant, one line to a section. The 
normal position of the tie breaker is not indi- 
cated. The solid 4.8-kv reactor plant auxiliary 
bus is provided with two sources from the pri- 
mary system and one source from the station 
generator circuit. The latter is normally in 
standby. Four 480-volt distribution buses are 
provided for the various areas of the reactor 
portion of the plant. Each bus is connected to a 
transformer, and two are paired on the 4.8-kv 
side through a common circuit breaker that con- 
nects to the reactor auxiliary bus. The four 480- 
Yolt distribution buses can be joined in pairs 
through normally open tie breakers. The re- 





viewer feels that this will be a good system if 
the detailed design is properly executed. There 
are, however, two points of concern: (1) the two 
incoming power lines follow parallel rights-of- 
way separated by 200 ft and may be subject to a 
common failure, and (2) the use of a common 
breaker for two transformers significantly in- 
creases the equipment affected by a single fail- 
ure. The absence of automatic transfer schemes 
is a step in the right direction. Complete loss of 
primary power is covered by a diesel-driven 
generator that is connected to the 480-volt sta- 
tion system. The reactor auxiliary bus can be 
bypassed for maintenance purposes. 


Control and instrument power is 120-volt a-c 
from a dc-ac alternator set with a tie to the 
station power. The safety-system power is also 
120-volt a-c from two dc-ac alternators con- 
nected to isolated buses and to separate bat- 
teries. The safety-rod system uses d-c power. 
The whole system appears to be reliable and 
reflects sound engineering. 


Experimental Gas-Cooled Reactor (EGCR)® 


The 13.8-kv, solid, main-station power bus 
is connected to the station generator and to one 
13.8-kv outside feeder at the EGCR. Twotrans- 
formers supply a two-section 2.4-kv bus, witha 


normally closed tie breaker, from the main- 
station bus. Two double-ended load centers, one 
for normal loads and the other for emergency 
loads, with normally open tie breakers are con- 
nected (each through its own transformer) to 
the 2.4-kv bus. The reviewer believes that the 
addition of at least one or more independent 
outside power sources would enhance the relia- 
bility of this system in the event of a complete 
primary power failure. The emergency source 
required after a scram is provided by two 
diesel-driven generators that are automatically 
switched to the distribution buses of the emer- 
gency load center. 


According to the hazards report,”® critical 
control power is obtained from two dc-ac al- 
ternators, the d-c sides being connected to sepa- 
rate 125-volt batteries and the a-c sides to in- 
dividual bus sections with a normally open tie 
breaker. Battery chargers normally carry the 
load, and their supply originates at the two sec- 
tions of the emergency loadcenter. This system 
does not represent the final design, and there- 
fore its evaluation is postponed. 
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Florida West Coast Nuclear Power Plant 
(FWCNP)26 


Two incoming 69-kv transmission lines at the 
FWCNP plant connect to a solid primary bus to 
which are tied the generator transformer and 
the auxiliary power transformer, which is nor- 
mally in operation. A second auxiliary power 
transformer can be connected to either of the 
two transmission lines by means of motor- 
operated disconnects. The low-voltage sides of 
these two transformers are tied to two solid 
2.4-kv bus sections, but only one transformer 
supplies power during normal operation. These 
two buses are then effectively run asasolid bus 
by means of two normally closed feeder breakers 
from the same auxiliary-transformer. In case 
of failure of the first transformer, transfer to 
the second transformer is automatic. The 600- 
volt auxiliaries are connected to two buses with 
a normally open tie breaker, each bus section 
being fed from a transformer supplied by one of 
the 2.4-kv buses. A diesel-driven generator and 
two 250-volt batteries provide power in case of 
loss of primary power. The automatic transfer 
designed into this plant could cause momentary 
interruptions of power to vital equipment. Also, 
a failure of the auxiliary transformer that is 
normally in operation would compel the operator 
to shut down the generator and disconnect the 
69-kv lines. Since an auxiliary transformer is 
already available to ensure continuation of aux- 
iliary power, it would appear that slight modifi- 
cation would permit maintaining uninterrupted 
generator output. 

All control power is provided by 250-volt bat- 
teries. Although the information concerning 
control power is incomplete, the concept of di- 
rect current as the control source is noteworthy. 


Peach Bottom Atomic Power Station 
(Peach Bottom)*27 


The hazards report for the Peach Bottom plant 
lists the available sources of power; however, 
the power source arrangement and method of 
distribution are not given. The single 220-kv 
line connecting the station generator to the sys- 





*The description of this facility, as described in 
the Site Evaluation Report,?’ was modified, as de- 
scribed in a letter dated Sept. 12, 1960, from S. R. 
Gaty, Vice President of Philadelphia Electric Com- 
pany, to the-editor. 


tem is a solid tap to a high capacity system in- 
tertie. Plant control will be designed so that the 
main turbine-generator will continue to supply 
auxiliary power upon loss of the incoming line. 
However, the main turbine-generator cannot be 
counted on as a power source in an emergency, 
and there is no assurance thatthe generator will 
stay on the line during a transient created by 
the loss of the incoming line. Backup power, 
adequate for orderly plant shutdown, will be 
supplied by a 33-kv power line originating at 
the Conowingo Hydro Station. An emergency 
diesel-driven generator will supply power for 
safe shutdown in the unlikely event of lossof all 
other power sources or other unusual condi- 
tions. A station battery will provide reliable 
power for reactor control and essential plant 
control and instrumentation. 


Piqua Organic-Moderated Reactor (Piqua)?® 


The primary incoming power for the Piqua 
plant consists of two 4.1-kv lines that connect 
to a solid station bus. To this bus are connected 
the two main pumps anda Single auxiliary trans- 
former which supplies all other station loads. 
Failure of this transformer would drop all sta- 
tion loads connected to it, which appears to the 
reviewer to constitute a rather inadequate ar- 
rangement. A diesel-driven generator is pro- 
vided to supply emergency power; however, 
there is no need to resort to emergency power 
so long as the two primary sources are capable 
of delivering the necessary power. (An interest- 
ing feature of this plant is that the steam pro- 
duced is piped to existing turbine-generators at 
Piqua; it has no station generator itself.) 

Control power is obtained from a solid bus 
with two batteries in parallel. One dc-ac al- 
ternator with a flywheel provides noise-free in- 
strument power to a distribution panel, which 
can be connected to a station feeder in case the 
alternator fails. The provision of only one al- 
ternator raises the question as to how the con- 
cept of coincident circuitry can be carried out 
even though coincident circuitry is provided in 
the safety system itself. [In general, at least 
three supplies are considered optimum for 
coincident circuitry to accomplish the two major 
aims: (1) prevent unnecessary shutdowns from 
false signals and (2) allow testing of safety 
channels to proceed with plant in full opera- 
tion. With only two supplies, if one fails, it is 
difficult to determine whether the other is 
intact. ] 
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Carolinas-Virginia Tube Reactor (CVTR)29 


The CVTR is integrated with a steam plant 
and a hydroelectric plant at the same site. The 
primary system comprises four 114-kv trans- 
mission lines, and a fifth line connects the steam 
plant with the hydroelectric plant. Auxiliary 
power for the reactor plant is distributed at 480 
yolts from a two-section bus with a normally 
open tie breaker. Each section connects to a 
feeder from 13.2-kv bus sections in the steam 
plant. An emergency supply line is provided and 
connected to the hydroelectric plant system. 
Auxiliary power reliability is further increased 
through switching facilities to several existing 
steam generators. The control power provisions 
are not documented. 


Conclusions 


Based upon an analysis and comparisons of 
the collective hazards summary reports, and the 
engineering judgment of the reviewer, the fol- 
lowing conclusions have been evolved which hy- 
pothesize the optimum power supply system for 
a nuclear power plant. 

The reliability of the auxiliary power for a 
reactor plant is only as good as the reliability 
of the primary power sources provided for that 
plant. In many instances, it appears that the 
plant site selection has a considerable influence 
upon the extent to which the designer can go in 
obtaining multiple external power sources. For 
continued operation, at least two outside sources 
must be available so that the loss of one source 
will not require shutdown or a decrease in the 
level of power output. Furthermore, these out- 
side power sources should run along divergent 
rights-of-way to minimize the frequency of si- 
multaneous interruptions during severe storms 
(instances of which have been personally ob- 
served by the reviewer). The latter require- 
ment has not been met by some of the installa- 
tions, probably because of site selection and 
financial considerations. 

In the majority of the plants examined, a com- 
plete failure of the primary supply is offset by 
providing one or more diesel-driven generators 
that are automatically started and tied to the 
essential postscram loads. Other plants rely on 
the availability of an emergency line from adif- 
ferent system before resorting to the use of the 
available diesel-driven generator. In other 
cases, no indication is given as to the existence 
of any internal independent emergency supplies. 


Some designs apparently attribute to the station 
generator the same source reliability as that of 
the incoming lines. However, there can be no 
positive assurance that the generator will con- 
tinue to operate after a complete severance from 
the outside system. Furthermore, during a re- 
actor shutdown, the station generator is not 
available at all as a source. In the case of the 
CVTR station,*® the problem of emergency power 
is simple because the nuclear plant is inte- 
grated with existing steam and hydroelectric 
plants at the same site. A similar advantage 


will be obtained when nuclear plants accommo- 
date two or more reactors. Some reactors al- 
low a considerable lapse of time upon complete 
power loss before damage to certain components 
can be expected. Even so, an independent emer- 
gency source in the plant is the best safeguard 
against the most extreme eventualities. 


The design treatment for the distribution of 
the auxiliary power follows various concepts. 
Some designs represent an adaptation from con- 
ventional plant methods, and other designs in- 
dicate an earnest endeavor to integrate the pe- 
culiarities of a reactor plant into a system that 
will provide acceptable reliability. As in the 
case of the primary transmission lines, two or 
more secondary feeders, connecting to either a 
solid bus or sectionalized buses, operating as a 
solid bus (with their tie breakers normally 
closed) allow the loss of one source without re- 
course to automatic transfers or reduction in 
power level. The presence of a tie breaker per- 
mits isolation of a bus fault; however, the re- 
liability of a properly designed solid bus is 
probably as high as or higher than the reliability 
of automatic switching equipment. Where two 
or more bus sections are used with normally 
open tie breakers, load diversification assures 
at least partial load operation in the event of 
failure of one of the multiple sources until full- 
source supply can be restored by manual or 
automatic transfers to the operable sources. 
With large reactors the tendency seems to favor 
multiple centers with broad load diversification 
and interconnecting facilities for the many bus 
sections. A temporary partial loss of load is 
unavoidable with such arrangements in the event 
of loss of an auxiliary feeder. This drawback 
can be avoided through the installation of dual 
full-capacity components, such as circulating 
pumps that operate in parallel and each pump 
connected to a different source of power. This 
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arrangement certainly has great merit, even 
though the capital investment is increased. 

In order to satisfy the primary criterion of 
reliability, the control power source must never 
fail. Continuous control power must be supplied 
even in the event of failure of one source, and 
thus two or more sources arranged to provide 
uninterrupted service to the control system are 
necessary. In several ofthe installation hazards 
reports reviewed, the designs presented do not 
meet these requirements. 

Most of the installations depend on some form 
of coincidence circuitry in their safety systems 
as a means of avoiding unnecessary shutdowns; 
however, the proper application of these cir- 
cuits demands consistency throughout, from 
power supply to sensors. It is useless to apply 
coincidence at the sensors and not at the power 
supplies. Most plants depend on dc-ac alterna- 
tor sets in suitable arrangements to provide 
power to the “source-sensitive” nuclear instru- 
ments. Few plants use d-c power for the safety 
circuits. Batteries are inherently more reliable 
than rotary equipment, and the use of solid- 
state devices operating on d-c sources would 
allow a-c sources to be abandoned in favor of 
batteries. This simplification of source re- 
quirements should result in greater reliability 
of the safety-systems. 
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Explosions and Fires 
in Compressed-Air Systems 


By JOSEPH J. DiNUNNO* 


Several instances of explosions and fires in 
compressed-air systems have focused attention 
upon the hazards associated with the inad- 
vertent entry of oil into air supplies and on 
the prevailing design practices for assuring 
the safety of compressed-air installations. 
Three explosions of air-oil mixtures occurred 
at nuclear reactor installations during the fall 
of 1959, none of which resulted in a nuclear 
incident. Two of the explosions occurred at 
the National Reactor Testing Station (NRTS) in 
the aftercoolers of the similar, large air com- 
pressors at the MTR and ETR installations. 
The third explosion occurred in the air flask 
of a hydraulic system on the USS Triton proto- 
type at West Milton, N. Y. 





* Joseph J. DiNunno, an electrical engineer, is a 
member of the Hazards Evaluation Branch (HEB) of 
the AEC. He received his undergraduate training at 
Pennsylvania State University and his graduate train- 
ing at both the University of Pittsburgh and the Uni- 
versity of Maryland, receiving an M.S. degree from 
the latter in 1954. Mr. DiNunno has long been asso- 
ciated with the national defense program, first with 
the Bureau of Ships. He served with the U.S. Army 
during World War II, and for 10 years thereafter he 
was with the Naval Ordnance Laboratory as a develop- 
ment engineer on control and instrumentation sys- 
tems. From 1956 to 1959, before joining the staff of 
HEB, Mr. DiNunno was with the Nuclear Propulsion 
Division, Bureau of Ships, where he was first con- 
cerned with reactor control and safety systems for 
naval nuclear power plants, and he was later power 
plant project officer for the guided-missile cruiser 
Long Beach. 
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Summary of Recent Incidents 


The compressors involved in the two NRTS 
incidents! were lubricated with a petroleum- 
base oil which had a flash point in the range of 
440°F and which had been recommended by the 
compressor manufacturer for this service. 
The first occurrence, i.e., the explosion at the 
ETR, involved a 4000-hp motor-driven three- 
stage compressor designed to deliver air ata 
pressure of 300 psig. The first indication of 
trouble came from annunciator alarm signals 
that indicated high temperatures of the crank- 
case-oil cooler and the effluent water from the 
aftercooler. Almost simultaneously a loud noise 
was heard, and smoking of the aftercooler shell 
was observed. The second explosion, i.e., the 
one at the MTR, involved a 1500-hp motor- 
driven three-stage compressor that was also 
designed to deliver air at a pressure of 300 
psig. Trouble was recognized when an operator’s 
helper at the compressor heard a loud unusual 
noise and then observed that the paint was 
blistering and smoking along the entire length 
of the shell of the aftercooler. 

In both these incidents, the fuel for the fire 
that followed the explosions was deposits of 
compressor lubricating oil in the aftercooler. 
Although the exact cause of ignition was not 
determined, the following events and postulated 
mechanisms of ignition were considered: 


1. Water-flow failure in the intercoolers be- 
tween the first and second compressor stages 
could have resulted in temperatures high enough 
to ignite carbon, scale, and oil deposits, which 
in turn could have ignited oil vapor in the air 
stream. 

2. Spontaneous ignition could have resulted 
from air under pressure passing over a mix- 
ture of oil and rust. It was noted that the final- 
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stage temperatures had gone above 320°F ata 
300-psig discharge pressure. 

3. Failure of an aftercooler tube could have 
allowed the compressed air to force the cooling 
water out of the compressor. The resulting 
localized heating could have been sufficient to 
cause ignition. 

4. Any of the following factors (such as 
static sparks in the air stream, oil breakdown, 
or the formation of peroxides or carbon-oxygen 
complexes) could have caused ignition of the 
oil vapor. 


The corrective measures taken after these 
two incidents included (1) conversion to a fire- 
resistant synthetic lubricant, (2) modification 
of piston rings to prevent intermixing of the 
crankcase oil and the synthetic lubricant, (3) 
addition of alarms on cooling-water lines to 
warn of flow shutoff, (4) addition of a closed 
cooling-water loop at one plant on a trial basis 
for improved control of temperature differen- 
tials across cylinders, (5) installation of manual 
blowdown valves on interstage piping, and (6) 
installation of traps on separators and after- 
coolers. In order to assure proper diffusion 
of the lubricant and thus prevent its accumula- 
tion in the system, changes were made so that 
the compressors would run constantly at full 
capacity, and the excess air available under 
partial load conditions would be dumped. 


The third incident,?,3 which was of a some- 
what different nature, occurred on the USS 
Triton prototype at West Milton, N. Y., on 
Oct. 30, 1959; and, as in the NRTS incidents, 
the explosion did not involve the nuclear portion 
of the plant. An air-oil explosion, followed by 
a self-extinguishing flash fire, occurred in an 
air flask component of a 3000-psi hydraulic oil 
system that normally served to actuate valves 
in the circulating-water and steam systems of 


the propulsion plant. The air flask was used 
to pressurize an accumulator consisting of a 
cylinder containing a free-floating piston that 
Separated the air from the hydraulic oil. The 
experts who surveyed the situation following 
the explosion agreed that the flask showed no 
evidence of prior metallurgical defect and that 
0il could and had entered the high-pressure air 
flask, thereby creating a potentially explosive 
mixture. In this case also, the mechanism by 
Which the explosion was initiated was not defi- 
nitely established, but the following events and 





postulated mechanisms of ignition were given 
as possible causes: 


1. Lifting of an air-relief valve could have 
started a shock wave of sufficient intensity to 
ignite an air-oil mixture in the air flask. 

2. Structural failure of the flask could have 
released an explosive mixture of oil and air. 
This mixture could have been ignited by hot 
metallic particles resulting from the bursting 
of the flask. 

3. Spontaneous combustion could have re- 
sulted from decomposition or other chemical 
reaction of the oil with the high-pressure air 
in the flask. 

4. Ignition could have been caused by com- 
pression or shock waves created by rapid 
opening of a valve in the high-pressure system. 


Corrective action in the USS Triton prototype 
case included (1) replacement of the oil in both 
the hydraulic system and the air compressor 
with a fire-resistant synthetic lubricant, (2) 
use of nitrogen in lieu of air to charge the 
flask, (3) improvement in the design of the 
accumulator piston to provide double-seal pro- 
tection and interseal venting, (4) provisions 
for complete drainage of the air flasks, and 
(5) the addition of a missile shield around the 
hydraulic plant. 


Review of Reactor Installations 


As a followup of these fire and explosion 
incidents, a review of the application of com- 
pressed-air systems in reactor plants was 
initiated. The review was directed toward es- 
tablishment of the following: 

1. Whether high-pressure air-oil systems 
similar to that of the USS Triton prototype ex- 
isted in other AEC or licensed reactor plants 

2. What hazards are associated with the use 
of compressed-air systems 

3. What design features would eliminate or 
minimize dangers from air-oil fires or ex- 
plosions in compressed-air systems 


Reviews of plant descriptions in the hazards 
reports on major reactor plants, such as 
Dresden, Yankee, VBWR, N.S. Savannah, and 
Shippingport, showed that none of these plants 
use high-pressure air-oil systems of the type 
that exploded on the USS Triton prototype. The 
N.S. Savannah has an oil-pressurized accumu- 
lator as part of the control-rod scram system, 
but the pressurizing medium is nitrogen. The 
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Shippingport reactor has a high-pressure valve- 
operating flask charged with air, but the hy- 
draulic fluid is water. Low-pressure systems 
(100 to 200 psi) are being used for rod-drive 
control schemes in some cases, and they are 
used almost universally for instrument and 
valve control functions. Low-pressure air for 
control of reactor plant components is being 
supplied most commonly from the nonlubricated 
(carbon-ring) types of air compressor. In sev- 
eral instances where this was not the case, 
followup action has led to a changeover to fire- 
resistant lubricants for the compressors. Gen- 
eral-service low-pressure air for auxiliary 
systems in such plants is supplied from pe- 
troleum-base oil-lubricated compressors. 
These oil-lubricated compressor installations 
include such safeguards ‘as aftercoolers, oil 
filters, and air-temperature monitors. 

The reports’? on the USS Triton prototype 
and on the ETR and MTR experiences were 
disseminated to AEC operations offices, and a 
request was issued for a survey of systems in 
AEC installations which might involve mixtures 
of air and oil under high pressure. Reports 
from the field offices indicated no widespread 
application of high-pressure air-oil systems of 
the type that led to the USS Triton prototype in- 
cident. Results of the dissemination of the in- 
cident reports led to improvements in systems 
in several instances and created greater gen- 
eral awareness of hazards associated with 
high-pressure air-oil applications. However, 
the reports from the field offices showed dif- 
ferences in the emphasis given to low-pressure 
air systems using oil-lubricated compressors. 
At some installations where low-pressure air 
systems were used, the existing safeguards 
were evaluated; whereas, in other instances, it 
was merely assumed that no hazards existed 
in the application of low-pressure systems. 
The ETR and MTR experiences with oil-lubri- 
cated compressors and the published informa- 
tion on hazards associated with compressed- 
air systems do not, as indicated below, support 
the view that low-pressure systems supplied 
from oil-lubricated compressors are inherently 
safe. 


Recommended Safeguards 
for Compressed-Air Systems 


Industrial experience was examined to deter- 
mine what hazards might be involved in using 


compressed-air systems in general, and, in 
particular, the low-pressure systems in com- 
mon use in reactor plants. This study revealed 
that fires and explosions have occurred in 
compressed-air systems since the earliest 
days of the air compressor and indicated that 
this subject requires serious attention with 
respect to reactor plant design. 


The numerous articles that have been pub- 
lished on the phenomena and mechanisms of 
fires and explosions in compressed-air sys- 
tems reveal that such incidents have not been 
confined to high-pressure systems. The com- 
mon factor in all incidents was that oil from 
the compressor was in the air supply. The 
mechanisms and phenomena‘: associated with 
air-oil fires and explosions may be summarized 
as follows: 


1. A fraction of the compressor lubricating 
oil can be entrained in the delivery air and 
deposited in the form of fine droplets in the 
piping, air coolers, and receivers. Oxidation 
of the oil results as a function of the air tem- 
peratures and pressures involved. Under ap- 
propriate conditions of temperature and oil- 
vapor concentration in the air, the vapor ignites 
and causes an explosion or fire. These con- 
ditions are most likely to occur when the oxida- 
tion reaction has been accelerated through 
rapid air flow and/or high temperatures and 
the air supply is suddenly cut off. 

2. Once a flammable gaseous mixture has 
formed in a pipe of sufficient length and di- 
ameter, the deflagration may initiate an ex- 
plosion that is fed directly by the oil deposit 
and is capable of propagating at high speed. 

3. The formation of a carbon-oxygen complex 
on carbon deposits from air compressors has 
been experimentally observed.® The formation 
of such a complex is an exothermic reaction. 

4. Chemical decomposition of oils to form 
peroxides can result from long-term contact of 
high-pressure air with oil, and the small 
amounts of sulfur sometimes present in lubri- 
cating oils may create sulfur gases that are 
flammable. 


The high-temperature conditions that must 
accompany the formation of explosive air-oil 
mixtures in order for fires or explosions to 
occur can be caused by the following: 

1. Oil-impregnated rust or carbonaceous de- 
posits over which high-velocity air flow may 
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heat up and give off flammable vapors that can 
ignite spontaneously. 


which is sufficient to vaporize certain grades of 
lubricating oil. When this vapor is mixed with air, 


2. Where an initial explosion is sufficiently 
severe to initiate a shock wave, the tempera- 


ture within the shock front can be sufficient to 
vaporize and ignite oil deposits in a pipe. 


3. The chemical action in the formation of 
carbon-oxygen complexes is exothermic and 
could act as a source of ignition. 

4. Ignition could result from compression or 
shock waves caused by rapid opening of a valve 
in a high-pressure air system where oil is 
present. 

5. Failure of cooling-water supplies to either 
the compressor or aftercoolers could result in 
increases in air temperatures to above the 
flash point of the lubricating oils. 

6. Leaking discharge valves in the compres- 
sor could result in abnormal air temperatures 
that would increase to above the flash point of 
the lubricating oils. 

7. High-temperature intake air or ciogged 
intake filters could cause excessive tempera- 
tures of the delivered air. 

8. In the case of air-starting lines, engine 
backfire could cause glowing carbon to blow 
past check valves and ignite flammable vapors 
in air receivers and piping. 

9. Some oils break down to form carbonaceous 
deposits on piston and discharge valves, and 
high-velocity air flow over such deposits could 
cause excessive heating. 


The need for special attention to the safety 
aspects of compressor installations and opera- 
tions has been repeatedly expressed in the 
literature. For example, in 1937, Gibbs dis- 


an explosive mixture is formed which may be readily 
ignited by a glowing bit of carbon or by tempera- 
ture alone. A good rule suggested for oil lubrica- 
tion was 1 to 4 drops per minute for small com- 
pressors, 6 drops per minute for medium sizes, 
and 10 to 12 drops per minute for large compres- 
sors. 

2. Only high-grade oil that contains no animal or 
vegetable oil should be used, Even the best oil de- 
composes to some extent and leaves a carbon de- 
posit that is carried into the receiver and piping. 
This carbon is flammable and soon becomes oil- 
soaked. Since it is under air pressure and exposed 
to great heat, it may glow or burn, thus igniting an 
explosive mixture of oil vapdr. The carbon deposit 
may be distributed to form a dust which may ex- 
plode when mixed with air and ignited. 

3. Faulty compressor discharge valves cause a 
sharp increase in air temperature. Friction alone 
may ignite carbon. Compressor valves should be 
cleaned at least once each month, or oftener if serv- 
ice is continuous. 

4, Explosions may occur by ignition of flammable 
vapors drawn in at the intake. The intake should be 
located where air is clean and cool. An air filter 
should also be installed. 


5. The air intake pipe should be 8 to 10 ft above 
ground level, or above the roof, yet as short and 
straight as possible to avoid pockets, turns, or 
traps where substances may accumulate. If the in- 
take has such pockets, drains should be installed 
and checked daily. Moisture has no effect on fire 
or explosions, but it does cause a corrosion effect. 

6. Every means should be used to keep the cyl- 
inder temperature down. This will decrease va- 
porization and decomposition of lubricating oils. 
This is accomplished by keeping ample cooling 
water circulating, drawing only clean cool air into 
the cylinder, and operating the compressor at a 


4 cussed the safety aspects of both the layout of speed no greater than rated, 

3 a compressor and its operation in the Com- 7. Deposits of scale form on the cylinder water 
1 pressed Air Magazine.’ Additional support for jacket and reduce the cooling effect. It is advisable 
such safe practices in compressor layout and to clean these jackets at least once a year. 
operation was given by Brown in Oil Weekly® in 8. Each air compressor should have a fusible 
f May 1943. A further discussion of safe practices plug in the discharge piping to relieve pressure 
l appears in an article by Attaway in Petroleum when temperature exceeds a certain limit— perhaps 
; Refiner.* Inasmuch as Attaway’s summary is fixed Hn 350 to 500°F, depending upon the compres- 

sor size. 
/ remit the practices he has listed are 9. Discharge piping should be at least the di- 
ameter of the opening in the air cylinder and should 
: be carried full size to the receiver. Bends, turns, 
t 1. The proper amount of oil to be used in the air and loops must be avoided!) ,,, . 
l cylinder depends upon the viscosity of the oil. Lit- 10. The receiver should be as close as possible 
0 tle oil is required to maintain operation. Lubrica- to the compressor and in a cool place, Each re- 
tion of the air cylinder, when incorrectly handled, ceiver should have a pressure gauge, safety valve, 
. is believed to be one of the largest causes of ex- and blowoff cock. 
y Plosions. At a pressure as low as 100 lb, the tem- 11. A shutoff valve should never be placed be- 





perature of an air cylinder often reaches 480°F, 





tween the compressor and the receiver unless a 
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safety valve is placed on the compressor side of 
the valve. Air outlet from the receiver should be 
at the top. 

12. All piping, fittings, and equipment must with- 
stand a test pressure of 1% times the normal op- 
erating pressure. Air receivers should be con- 
structed to ASME Code. 

13. Air starting lines should have two check 
valves located at least 10 pipe diameters apart. In 
case of engine backfire, glowing carbon may be 
blown past a single check and ignite flammable va- 
pors present in the air receivers and piping. 


The use of fire-resistant lubricants is usually 
given as a means for minimizing fires and ex- 
plosions in compressed-air and hydraulic sys- 
tems. Such fluids exist in various forms, in- 
cluding synthetic lubricants, mixtures of water 
and water-soluble synthetic lubricants, and 
emulsions of petroleum oils and water obtained 
with the use of emulsifying agents.’ Al- 
though such fluids appear to have many de- 
sirable features that enhance the safety of the 
equipment with which they are used, they are 
not without certain limitations that should be 
recognized. The aqueous-base fluids are often 
referred to as “snuffer’’ type fluids, which 
impart fire resistance through release of a 
protective steam blanket in the presence of 
high temperatures. Since such fluids depend on 
water content for fire resistance, their ap- 
plication requires a temperature limit (gen- 
erally of the order of 150°F) and a periodic 
makeup of the water content. The viscosity of 
such a fluid changes, of course, with changes 
in the water content. Other special considera- 
tions in the use of aqueous-hase fluids include 
the effects on paints. Softening and the lifting 
of many of the conventional types of paint and 
coating will result from the use of aqueous- 
base fluids. The high vapor pressure of the 
fluid at elevated temperatures, caused by its 
high water content, will result in loss of water 
and some of the volatile inhibitors. Zinc- and 
cadmium-containing alloys or coatings could 
not be used in such applications because they 
are frequently dissolved by aqueous fluids. 
Grease is not soluble in these fluids, and 
excess lubrication might result in filter clog- 
ging. 

Nonaqueous fluids of the phosphate ester 
type might harm packings compatible with 
petroleum oils. Static seals might swell in 
time, and such swelling of dynamic seals would 
cause them to tighten and rub on moving parts. 


If a system is being changed over to utilize 
this type of fire-resistant fluid, a change of 
seals is recommended.’® It is understood that 
butyl type rubber is resistant to such fluids, 
but a softening effect occurs on Neoprene or 
Buna N rubber. 


Hydraulic Accumulators 


Since an accumulator was involved in the USS 
Triton prototype incident, a brief review was 
made of safe practices in accumulator design. 


Various accumulator designs exist which in- 
clude gravity, spring-loaded, pneumatic, in- 
flexible separator, and flexible senarator 


types.'® 


Manufacturers of hydraulic accumulators have 
recognized standards’® covering the safety de- 
sign aspects of such components; these stand- 


ards were adopted at a Joint Industry Con- 
ference in 1959. The following criteria are 
quoted from the standards: 


1. The accumulator shall be constructed to with- 
stand at: least five times the operating pressure of 
the hydraulic system it serves. 

2. Means shall be provided for safely relieving 
accumulator gas and liquid pressure before the ac- 
cumulator can be disassembled. 

3. Hydraulic circuits incorporating accumulators 
shall be arranged so that the system can be bled at 
the high point of the circuit. 

4. Hydraulic circuits incorporating accumulators 
shall be interlocked to vent or isolate accumulator 
fluid pressure when the power is shut off. 

5. In circuit application, where accumulator 
pressure is isolated, full information shall be given 
on or near the accumulator for proper servicing tv 
prevent injury to personnel, 

6. Gas accumulators operating above 200-psi 
charging pressure shall be charged with nitrogen 
unless fire-resistant fluids are used, in which case 
air is permissible. 


Conclusions 


The incidents covered by this report, to- 
gether with the published information on this 
subject, show that the potential hazards of 
systems involving compressed-air and oil mix- 
tures are indeed real and that such hazards are 
not peculiar to high-pressure systems alone. 
Furthermore, adequate design practices have 
been developed over the years to enhance the 
safety of such systems, and these design prac- 
tices should not be compromised or ignored. 
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Instead, the application of safe design prac- 
tices, coupled with recognition by operating 
personnel of the potential hazards involved and 
the need for thorough preventive maintenance, 
should do much to minimize the possibility of 
incidents similar to those experienced at the 
USS Triton prototype and at the MTR and ETR 
installations. (Joseph J. DiNunno) 


Pressure -Suppression 
Containment 


Nuclear power plant designers have always 
been concerned with the nonproductive costs 
imposed upon the reactor portion of the plant 
in order to achieve “adequate’’ safety. Most 
imposing, in both cost and size, is the con- 
tainment vessel surrounding the nuclear portion 
of most plants to contain radioactivity in the 
event of a major reactor accident. Of the sev- 
eral new approaches to containment which give 
promise of increased economy, one of the more 
interesting approaches for boiling- or pres- 
surized-water reactor systems is that known 
as steam-suppression containment. Beck?® has 
described this scheme in the following terms: 


The principle of [the] steam-suppression contain- 
ment scheme is to locate the reactor and its pri- 
mary system so that the steam which might emerge 
from any break in the system is transmitted through 
a tank of water before it can be released into the 
building enclosing the facility. As the steam trav- 
erses the water path, it is condensed into water, 
hence no steam pressure is built up in the building, 
and most of the fission products, except noble 
gases, would also be retained in the water. The ex- 
ternal containment vessel would then need to have 
only nominal pressure capacity, and leakage of 
noble gases only need be considered. 


Before any containment scheme can be re- 
garded as acceptable, its performance must, of 
course, be demonstrated to the satisfaction of 
the AEC. The lack of experience with contain- 
ment systems, other than the proven pressure 
vessels, and the expense of ascertaining their 
performance data are the principal factors that 
have inhibited their use in the nuclear power 
plants constructed to date. Of the many power 
reactors proposed for construction in this 
Country, steam-suppression containment. is 
planned for only one, the Humboldt Bay Power 


Plant of the Pacific Gas and Electric Company. 
In their application for a construction permit,”! 
the Pacific Gas and Electric Company proposes 
to build a nuclear power station employing a 
200-Mw(t) boiling-water reactor provided with 
pressure-suppression containment. Although 
the construction permit for this facility has not 
yet been approved, the Company is continuing 
with a development program intended to demon- 
strate the sufficiency of such containment for 
the Humboldt Bay plant (see Section VI, p. 111). 


The Humboldt Bay reactor vessel contains 
1790 cu ft of water and is enclosed in a 12,000- 
cu ft vessel called the dry well. The dry well 
is vented through a set of pipes that terminate 
in a 20,000-cu ft pool of water. This pool, 
along with a 32,375-cu ft gas space above it, is 
enclosed by a third vessel, which is called the 
suppression chamber. The dry well, because it 
is vented through a water seal, is designed 
only for the maximum transient pressure in- 
crease during a release. The suppression 
chamber is designed to take only the air and 
other noncondensable gases from the dry well 
because the steam is to be condensed in the 
pool. The radioactive contamination would pre- 
sumably not escape from the suppression cham- 
ber and would probably be stopped during the 
steam condensation in the pool. Since the rest 
of the structure, which houses the turbine, 
condensers, and other auxiliary equipment, 
does not need to be pressuretight, the cost will 
be substantially less than the cost of a pres- 
suretight containment vessel. 


The utility of a containment scheme such as 
this is quite dependent on the reactor type, 
which, in turn, can be characterized by the 
maximum credible accident. For the Humboldt 
Bay reactor the maximum credible accident is 
defined as the worst coolant-loss accident that 
could result from near-instantaneous complete 
severance of any pipe connected to the reactor 
vessel. Such an accident, incidentally, would 
include (1) the possibility that the broken pipes 
or other failed parts will become missiles, (2) 
blast effects, (3) reactor-vessel reaction from 
the escaping steam and water, and (4) leakage 
of fission products into the steam. Included in 
the events that were not considered credible 
was the rupture of the reactor vessel. In order 
to justify this assumption, the Pacific Gas and 
Electric Company used the very impressive 
statistic that, in over 4000 boiler-years of 
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operation at pressures in excess of 600 psia, 
there has never been a vessel failure. 


The sequence of events during the maximum 
credible accident would be as follows: an 8-in. 
feed-water line to the reactor would rupture 
and allow the superheated water to pour from 
the reactor vessel into the dry well and flash 
into steam. After the water had been expelled, 
the steam from the reactor vessel would then 
follow. Because of the higher mass flow rate 
of water, the feed line failure would result ina 
higher peak pressure in the dry well than the 
failure of the 12-in. steam line. Air and steam 
would exhaust from the dry well through the 
pool into the suppression chamber. At operating 
conditions the available thermodynamic energy 
is about 36 million Btu, and the residual nu- 
clear energy (120 sec) available is 4 million 
Btu. The vents from the dry well originate as 
six 40-in.-diameter pipes, each of which mani- 
folds its flow into eight 14-in.-diameter nozzles 
directed vertically into the pool, with a sub- 
mergence of 6 ft. The transient pressure in 
the dry well from the release of water vapor 
and liquid from the pressure vessel and the 
venting of the vapor through the vents will 
reach about 23 psig. The 20,000 cu ft of water 
in the pool will rise in temperature 36°F, and 
the pressure in the suppression chamber, be- 
cause of the addition of air from the dry well, 
will rise to 9 psig. When the core goes dry be- 
cause of loss of coolant, a backup core cooling 
system will function so that the fission products 
will be essentially retained at their source in 
the fuel. Nevertheless, the sudden release of 
pressure and the mechanical action of the steam 
and water rushing out of the primary system 
may cause some fuel-rod failures. 


Of the questions that arise concerning the 
feasibility of a scheme such as this, perhaps 
the most important is whether the escaping 
steam can be condensed in the pool at a rate 
fast enough to prevent excessive dry-well pres- 
sures. In order to answer this question con- 
vincingly, extensive calculations were made on 
an assortment of models, and three sets of 
experiments were undertaken. In the first of 
the experiments, performed at the Moss Landing 
Power Plant of Pacific Gas and Electric Com- 
pany, the behavior of a jetofsteamin water was 
éxamined. A large tank of water, compart- 
mented to simulate the suppression-chamber 
pool, was used to condense steam from 4- to 


14-in.-ID jets at steam rates from 10,000 to 
93,000 lb/hr and at submergences from 1 in. 
to 6 ft. The results of over 100 runs in this 
facility established unequivocally that pure 
steam will condense at a very high rate in 
water. Some instabilities were noted when the 
water temperature rose to as high as 150°F, 
and some escaping steam was noted when the 
submergence was reduced to only a few inches. 
Normally, the length of the jet from the nozzle 
was on the order of 2 ft or less. 


The second set of experiments was per- 
formed with a model scaled approximately to 
one-tenth of the linear dimension of the reac- 
tor. The system consisted of an electrically 
heated pressure vessel, which was separated 
from the dry well by a rupture disk; a change- 
able orifice to restrict the flow; a set of jets; 
a pool; and a suppression chamber, which in 
the model was a vessel of sufficient strength to 
assure safety. During the 30 runs performed 
in this facility, the transient pressure rise in 
the dry well followed the calculated prediction 
with reasonable accuracy. The suppression- 
chamber pressures were also similar to the 
predicted values; however, the facility was not 
so accurate to the scale in regard to the sup- 
pression chamber. 


The third set of experiments is in progress 
and is intended to clarify some points of weak- 
ness in the original experiments and to employ 
some details of the system design which were 
evolved since the original experiments were 
undertaken. Specifically, a full-scale segment 
of the suppression chamber (1:6) is being 
mocked up which will run with pure steam and 
steam-air mixtures to establish that (1) there 
will be no oscillations in pool level which could 
result in the uncovering of a jet and (2) the 
presence of various amounts of noncondensable 
gas in the steam will not affect the rate of 
condensation sufficiently to allow the buildup of 
steam in the suppression chamber to intolerable 
pressures. 


The pressure-suppression concept is a bold 
step toward the simplification of boiling-water- 
reactor containment and is being carefully 
scrutinized by the Advisory Committee on Re- 
actor Safeguards and by the AEC. If it is found 
to be acceptable, the Humboldt Bay Power 
Plant containment scheme will probably re- 
place the conventional pressure dome for many 
future reactors. (M. E. Whatley) 
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Safety in Hot-Laboratory 
Design and Operation 


The “hot’’ laboratory, i.e., a laboratory de- 
signed for remote handling of radioactive and 
toxic materials, is an integrated system of 
safety devices for protecting personnel from 
the radioactivity and the toxicity of some of 
the materials handled therein while, at the 
same time, permitting personnel to work with 
these materials. The safety devices include 
the building structure, shielded hot-cell en- 
closures, ventilation and air-cleaning equip- 
ment for the hot cells and the building areas, 
radiation-detection instruments, remote ma- 
nipulating devices, glove boxes, shielded view- 
ing systems, hot waste systems, and fire- 
protection systems. 


Hot-laboratory operations involve hazards 
that are sometimes of great magnitude. The 
effects of an “incident’’ or accident could be 
fatal, costly, and widespread since most of the 
hot-laboratory buildings also house offices, 
“cold’’ laboratories (for direct handling of 
nonradioactive and nontoxic materials), and 
other uncontaminated areas. Although such un- 
contaminated areas are protected by “clean’’ 
(uncontaminated) corridors, by barrier walls 
that have few penetrations, and by differential- 
pressure atmospheres, they could become con- 
taminated by an accident. These clean facilities, 
which are required in the technical support of 
the hot laboratories, whether located in the 
same building, in attached buildings, or even in 
adjacent buildings, add many more people who 
may be exposed in the event of an accident. In 
addition, they add space and equipment that 
would be costly to decontaminate. The time 
lost from an accident would also add to the 
ultimate expense of the incident. 


Most of the literature on hot-laboratory de- 
Sign and the attendant safety considerations is 
concerned with laboratory complexes that in- 
Clude hot, cold, and supporting facilities in the 
same building. The proceedings of the Hot 
Laboratories and Equipment Conferences” 
contain many papers that describe designs of 
such facilities. This review is concerned with 
three recent discussions of safety in hot labo- 
ratories: (1) the safety aspects of the BNL 
incident of May 1957, which involved corrosive 
fumes; (2) procedures for use in the handling 


of plutonium; and (3) the safety aspects of the 
ORNL incident of April 1960. 


BNL Incident of May 1957 


The so-called “BNL Incident of May 1957” 
was described by Stang at the Sixth Hot Labo- 
ratories and Equipment Conference,”’ and the 
safety recommendations that resulted from the 
study of this event were discussed. The ac- 
cident took place in a nonradioactive pilot-plant 
arrangement that was located in a hot area of 
the laboratory but was not contained in a hot 
cell. This pilot plant was being used for tests 
of a volatility process of recovering uranium, 
in which bromine trifluoride was employed to 
fluorinate the metal. The incident apparently 
resulted from a piece of uranium metal being 
accidentally withdrawn into the gaseous region 
above the liquid in the dissolver. A series of 
about five explosions occurred in rapid se- 
quence. Highly corrosive fumes of the bromine 
trifluoride then penetrated many parts of the 
building. 

Detailed examination of the facts surrounding 
this incident and of the subsequent events led to 
a number of recommendations with regard to 
future operation. Perhaps the most significant 
conclusion was that a hot-laboratory building 
should not be employed for purposes other than 
those for which it was designed. Pilot-plant 
work of this nature should be isolated in a 
separate, sealed building. It was specified that 
the BNL hot-laboratory facility was not again 
to house a pilot-plant operation involving an 
explosion hazard, regardless of the number of 
safety precautions taken to prevent explosion. 

The characteristic behavior pattern of people 
immediately following an incident was well il- 
lustrated in this case. The first reaction of 
an individual is to run away from the scene and 
then to take a shower. In the BNL incident, 
personnel followed this pattern, and in their 
excitement some even ran past one or more 
safety showers in an adjacent safe area to a 
shower which was familiar to them. This be- 
havior pointed up several considerations in the 
design and placement of safety showers. 
Stang’s’’ suggestions are summarized below: 


1. Safety showers should be located in all 
areas of the hot-laboratory building. 

2. Some safety showers should be located 
outside the hot-laboratory building since a fire 
or explosion can quickly fill an enclosed area 
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with blinding or toxic smoke or fumes and thus 
prevent the use of indoor showers. 

3. Safety showers should be marked with 
bright-green flashing lights. 

4. These lights, together with other desirable 
emergency lighting, should be on an emergency 
power circuit so that they will remain on at all 
times, regardless of power failure or inten- 
tional shutoff of normal power. 

5. Eyewash fountains should be installed at 
all safety showers. 

6. Everyone in the building should participate 
in'a regularly scheduled safety-shower check. 
Scientists, technicians, supervisors, secre- 
taries, janitors, and others should take turns in 
testing all the showers at scheduled times. 


In addition, it is the opinion of the reviewer 
that the shower valve-actuating mechanism 
should be a wall-fastened chain so that persons 
who are unable to see can grope along the wall 
to find it. 

In the BNL incident, a partially opened door 
equipped with a door closer in poor working 
condition contributed to the spread of fumes 
and smoke. Doors and door closers should be 
in good operable condition. Door closers are 
frequently installed to position doors in a man- 
ner that will ensure proper flow of ventilating 
air from cleaner areas. The effects of any 
imbalance due to explosions or sudden drafts 
will thus be minimized by properly operating 
doors. Furthermore, all doors, both exterior 
and interior, should be readily operable from 
both sides. If normal traffic is to be limited to 
one direction, a key (under glass) or other de- 
vice at the door frame should be available for 
emergency entry. 

In the BNL incident, no radioactivity was in- 
volved. However, the fumes were highly cor- 
rosive. Rapid purging of the smoke was nec- 
essary to clear the air in the building in order 
to search and guarantee that no one was left in 
the building and also to permit the fire fighters 
to extinguish the small fire. It was difficult to 
get to the two override manual switches for the 
ventilation fans, which were located in the 
smoke-filled area. Stang?’ suggested that a 
manual override switch for the building ventila- 
tion system should be located on the outside of 
the building. Override switches for air-con- 
ditioning systems, which can very effectively 
scatter radioactive particles throughout a build- 
ing, and for other critical services should also 


be installed on the outer walls of the hot- 
laboratory building. It is now considered good 
practice, in order to confine contamination, to 
clean all cell ventilation air before it leaves 
the laboratory building and enters the plant- 
wide system. 

In order to ensure that there is always, 
during working hours, one person who is in 
charge of the hot-laboratory facility, a check- 
board system was devised at BNL. Six persons 
are available on the permanent emergency 
staff. When the person at the top of the list 
leaves the building, his departure is noted on 
the board, the next person is notified that he is 
the emergency supervisor. The responsibility 
is passed along, starting with the first name 
each morning. 

A rule has been set up to require everyone, 
including transient visitors, to wear safety 
glasses at all times in the hot-laboratory 
building, except in the offices and in the cold 
corridor. This replaces a previous rule re- 
quiring safety glasses to be worn only by those 
performing hazardous operations and those in 
the vicinity of such operations. It was found 
that this rule had left too much to the judgment 
and discretion of individuals. One-piece plastic 
suits that cover the entire body and are equipped 
with a bottle containing a 10-min supply of 
compressed air are available in strategic areas 
and are ready to step into at a moment’s 
notice. 

In addition to these major recommendations, 
a number of other safety suggestions that are 
applicable to all hot laboratories were made by 
Stang.2" His suggestions are summarized be- 
low: 

1. A public-address system is useful on 
many occasions, and, in an emergency, it be- 
comes very valuable; the system should be set 
up to operate from an emergency power supply. 

2. Scheduled reindoctrination of hot-labora- 
tory personnel in the use of emergency equip- 
ment should be practiced since people tend to 
forget over a period of time how to use some 
of the devices properly. 

3. Exterior electric outlets for operating 
portable pumps for emergency air sampling 
and monitoring should be available. 

4. It should be possible to hear fire alarms 
in all areas of a facility. 

5. Since the accounting for personnel after 
an emergency can be no better than the knowl- 
edge of whom to expect to have been in the 








= = 





PLANT SAFETY FEATURES 53 


building, procedures should be established for 
assuring accurate knowledge of personnel oc- 
cupancy of the building at all times. (At BNL 
this problem was difficult to handle because 
about 40 per cent of the occupants of the build- 
ing were organizationally outside the hot-labo- 
ratory division. A picture chart is now hanging 
in the staff office of the building, and both the 
temporary personnel using the facilities and 
the permanent employees are shown on this 
chart. Absentees and temporary absences from 
the building are posted. Frequent drills have 
demonstrated that, with the use of these aids, 
all occupants of the building can be readily 
accounted for.) 

6. All new temporary and permanent occu- 
pants of the building should be issued safety 
instructions, building rules, safety shoes, and 
safety glasses. 

7. In order to make safety posters and other 
important signs stand out emphatically, all un- 
necessary or unimportant signs should be re- 
moved. 


Dry Boxes for Use with Plutonium 


Safety considerations involved in the handling 
of plutonium in a dry-box system were also 
discussed at the Sixth Hot Laboratories and 
Equipment Conference.”’ It was pointed out 
that the principal hazards in the handling of 
plutonium and its alloys are inhalation and fire; 
shielding from radiation is usually not a prob- 
lem, although it may become one when handling 
plutonium of high exposure from spent power- 
reactor fuels. In order to protect personnel 
from the inhalation hazard, the handling is done 
in an airtight glove box or dry box. The interior 
atmosphere of the box is usually maintained at 
a negative pressure of approximately '/,-in. 
H,O so that leakage, if any, is inward. 


Because the consequences of the spread of 
contamination from a fire would be serious, 
all possible precautions are taken in the design 
and construction of such handling facilities to 
prevent fires. Fire-resistant construction, 
metal equipment, fire-detection and alarm sys- 
tems, fire walls and doors, and the practice of 
emergency procedures are recommended. In 
order to minimize the fire hazard, dry inert 
atmospheres containing a minimum of 30 per 
cent helium are maintained in the boxes. A 
helium analyzer is used inthe exhaust to provide 
continuous monitoring to assure that this con- 


dition is met. The presence of combustible 
vapors in dry boxes is prohibited because such 
vapors have caused explosions in the past. 
Sprinkler systems are excluded from plutonium- 
handling areas. 


The recommended -dry-box design provides 
interiors that are smooth and free of crevices, 
with rounded corners to minimize collection of 
contamination and to facilitate cleaning. No 
sparking electrical equipment is permitted in 
the interior of a box. The box is illuminated 
from the outside through windows. For the 
windows of dry boxes, polymerized polyester 
resin (Homolite) is recommended since it is 
believed to be the most resistant of available 
materials to pressure and to chemicals. Where 
the work being done requires visual quality 
control (such as machining and precision meas- 
urements), laminated safety glass is used. 


Individuals involved in the handling of plu- 
tonium should be made fully aware of the 
hazards. They should undergo regular health 
checks, and they should receive safety instruc- 
tions in operating and fire-handling procedures. 

(Frank Ring, Jr.) 


ORNL Incident of April 1960 


The events leading to a release of activity 
from a hot cell at the Oak Ridge National Labo- 
ratory, the subsequent handling of the incident, 
and the recommendations of the investigating 
committee are given in an as yet unpublished 
report.*® The accident occurred when the pres- 
sure in the cell was permitted to exceed that 
of the operating face area. A total of less than 
1 curie of beta-gamma fission-product activity 
from a sectioned fuel element was expelled into 
an operating area. From this area the activity 
was sucked down an adjacent stairwell through 
an open doorway in a wall separating the office 
section of the building from the hot area. A 
large fraction of the activity was picked up by 
the air conditioners at the head and foot of the 
stairwell, and, although the air was filtered, 
some of the activity was circulated back over 
the hot-cell area. 

At the time of the activity release, there 
were eight persons in front of the cell and 
directly in the path of the radioactivity. Another 
13 persons were in the general hot-cell area 
but not directly in the path of the activity. None 
of the exposed individuals is believed to have 
received in excess of the maximum permissible 
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exposure. Analyses of the presently available 
exposure data, which must still be considered 
to be preliminary, indicate that one person 
ingested a quantity of activity which will give a 
1.2-rem exposure to both lungs and bone during 
the first quarter and 2.1 rem during the first 
year. Another person will receive a 0.3-rem 
exposure during the first quarter, and the 
other individuals will receive at least a factor 
of 10 less than the highest exposure. 

Although the cause of the positive pressure 
in the hot cell is not known with certainty, it 
is now believed to have been the result of the 
following sequence of events: (1) openings in 
the face of the hot cell in question were not 
sealed, (2) alterations were being made in an 
adjoining cell and that cell was open on one 
side, (3) the two cells were interconnected, (4) 
an outside door opposite the open side of the 
cell being altered was opened, and (5) pressure 
disturbances that were created by the opening 
of the door and were transmitted through the 
two cells caused activity to blow out through the 
unsealed penetrations in the operating cell face. 

It is apparent that (1) the operating cell was 
not adequately equipped to maintain the required 
negative pressure under the conditions to which 
it was subjected and (2) there was no alarm 
system to indicate the failure of the protective 
pressure differential. Furthermore, it was im- 
prudent to permit alterations to be carried out 
in an adjoining cell without sealing the openings 
(about 3 sq ft in total area) between the two 
cells. The following statements are excerpts 
from the conclusions and recommendations of 
the investigating committee report:*° 


1. Prior to the incident, no one properly as- 
sessed the extent of this hazard, ... [The] proce- 
dures and equipment ... were inadequate to cope 
with the unusual hazard involved. 

2. The facility, in addition to not being equipped 
for such an operation, was in a dangerous state. 
For instance, the off-gas filters were bad, the ad- 
joining cell was wide open, the cell pressure was 
dangerously near that of the operating area, and the 
back door to the building was left open. 

3. The flow and recirculation of air throughout 
the entire building, from hot-cell areas to office- 
laboratory areas, was contrary to good practice; 
and previous incidents somewhat similar to this 
one, but of lesser extent, were common knowledge 
of persons familiar with this area. 

4. Inadequate radiation-monitoring equipment 
was available to determine the extent and nature of 
the activity released. 


5. No emergency communication system was 
available, and at least 15 min was required to alert 
the building occupants that a radiation release had 
occurred, 

6. No masks or other emergency supplies were 
readily available; and, after they were aware that 
air-borne activity was present, five persons re- 
mained in the area without masks [in order] to se- 
cure the cells. 


As a consequence of this incident, a set of 
criteria for the safe operation of hot cells has 
been established. These criteria are based on 
principles that have been recognized for years, 
but they are specific with respect to the applica- 
tion of these principles. In addition to estab- 
lishing these criteria, a system has been 
specified for ensuring compliance with the 
criteria for every new and different situation, 
for establishing adequate emergency proce- 
dures, and for training an emergency organiza- 
tion. 

The outline of minimum standards for hot 
cells given in the ORNL investigating committee 
report is listed below: 


1. A minimum of 0.1 in. of water vacuum must 
be maintained on hot cells and a minimum flow 
through any opening of at least100 ft/min with suffi- 
cient exhaust capacity so that these minimum values 
can be maintained for any credible situation that 
may arise, and an alarm must be provided to indi- 
cate when the vacuum drops below 0.1 in. of water. 

2. Exhaust from hot cells must pass through at 
least one roughing filter and an absolute filter and 
be continuously monitored with an alarm before 
being discharged to the environment. 

3. For any operation which is likely to produce 
gross amounts of air-borne contamination, an ad- 
ditional line of containment within the cells should 
be provided with an exhaust which is filtered before 
discharging into the cell ventilation or other suitably 
filtered system. 

4. Provision must be made for removing chemi- 
cal contamination from the cell off-gas such that 
the filters are not impaired, and special chemical- 
resistant filters are to be used where needed. 

5. Vacuum lines run into cells should be ade- 
quately trapped, treated for chemical contamina~- 
tion, and filtered before leaving the shielded area. 

6. All known liquid radioactive effluents should 
be routed to the appropriate hot waste system. 

7. All other possible routes of radioactive ma-~ 
terial release, such as process water drains within 
the cells, should be monitored, and provision should 
be made for diversion to the hot waste system. 
Process water should not be discharged to the hot 
waste system except in case of an emergency. 
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8. All operations in hot cells which involve un- 
usual hazards (such as large quantities of alpha or 
soft-beta activity which are difficult to detect; gase- 
ous activity; possibility of an uncontrolled chemi- 
cal reaction, fire, or explosion; and possibility of a 
critical assembly) should be individually reviewed 
by the director of Radiation Safety and Control. 

9. The area around hot cells up to a second line 
of contamination control should be regarded as a 
likely contamination zone, and monitoring for all 
persons and materials leaving this clearly defined 
zone should be mandatory. 

10. Adequate radiation-detection instruments 
should be present in such areas to give prompt in- 
dication of air-borne activity, any significant spread 
of contamination, or an increase in background ac- 
tivity. 

11. In addition to a line of contamination control, 
provision for a complete second line of containment 
should be provided around hot-cell areas, such that, 
when a radiation release is detected, the area is 
automatically isolated and exhausted through a filter, 
if practical the cell ventilation system. 


Conclusions 


It is apparent that dry boxes and hot cells 
can be constructed and operated safely. The 
incidents discussed here and the supporting 
literature show the way to attain safety in a 
hot-laboratory complex. If accidents in such 
facilities are to be held to a minimun, it is 
imperative that the principles illustrated here 
and reiterated in the recommendations be ap- 
plied in the design and operation of such facili- 
ties. 

For many years it has been the practice in 
industry to separate, confine, and usually con- 
tain potentially hazardous operations. As a 
corollary, the hot-laboratory building should 
contain only hot cells or glove boxes, ventilating 
filters and fans, air-conditioning equipment, 
and a radioactive waste system. The support- 
ing facilities should be in a separate building. 
This philosophy of design should be seriously 
considered for any new hot-laboratory facili- 
ties, especially in view of the increasing levels 
of activity being handled in hot cells, and the 
recent incidents. 

Containment facilities within the hot labora- 
tory should be designed to provide two lines of 
defense, each “failure free’’ and each provided 
with instrumentation and alarms that would 
direct attention to an incipient failure in any of 
the containment provisions before the complete 
failure of either line of defense. Such pro- 
Visions would include the maintenance of an 


adequate negative pressure differential from 
the outside to the inside of a hot-laboratory 
area, as well as from the laboratory area to 
the hot cell. These pressure differentials should 
be attained with facilities designed so that the 
failure of any single blower or power supply 
would not result in the loss of the desired 
pressure differentials, which, in turn, should 
be monitored in such manner as to instigate an 
alarm at a significant loss-of-pressure dif- 
ferential. 


Although such provisions should be required 
for high-level (>1 curie) hot cells, it would not 
be correct to assume that these provisions 
would be required for all hot cells regardless 
of the nature and amount of the activity to be 
handled. Rather, the consequences of the ac- 
cidental release of activity from a given facility 
and for a particular operation must be evaluated. 
The adequacy of any facility for any particular 
operation must be determined in view of the 
consequences of the credible activity release. 
There is considerable judgment involved on the 
part of the facility operator, both in the as- 
signment of a maximum credible accident and 
in the determination of acceptable consequences 
for particular facilities. Thus it may be shown 
that there will exist some low activity level be- 
low which a single containment barrier (in this 
case, the pressure differential maintained be- 
tween the laboratory area and the hot cell) will 
be sufficient. 


Once the safety criteria for a facility have 
been determined, it is the responsibility of the 
operator to see that the safety features are 
operative, adequately backed up, and instru- 
mented. In addition, the operator must estab- 
lish procedures to familiarize the operating 
personnel with the operational hazards and 
emergency actions. (W. B. Cottrell) 


Containment of Power Reactors 


Every existing and presently proposed U. S. 
power reactor has a separate containment 
structure that is functionally independent of the 
reactor and acts as a final barrier tothe spread 
of hazardous radioactive contaminants to the 
surroundings in the event of accidental release 
of radioactivity from the enclosed reactor sys- 
tem. In most cases this containment structure 
has taken the form of a steel pressure vessel 
that is capable of withstanding the maximum 
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pressure anticipated during a maximum credi- 
ble accident. 


There have been a few deviations from this 
concept in attempts to reduce costs. For in- 
stance, the Boiling Nuclear Superheater Reac- 
tor (BONUS) to be built at Punta Higtiero, 
Puerto Rico, will have a large-volume steel 
hemispherical dome welded to a cylindrical 
section resting on a thick concrete foundation 
mat. In this case the philosophy is to keep the 
pressure low by enclosing the whole plant ina 
large-volume structure, and, at the same time, 
to reduce the number of penetrations of the con- 
tainment shell. For the boiling-water-reactor 
plant at Humboldt Bay, it is proposed to employ 
a pressure-suppression scheme in which the 
steam from fissure of the main coolant system 
will be routed through a water tank and con- 
densed. 


The Hallam sodium-cooled reactor will be 
contained by individual steel-lined concrete 
cells within which the primary system com- 
ponents are located and which are maintained 
with a nitrogen atmosphere. Additional con- 
tainment is provided by a conventional metal- 
covered steel-frame building which is equipped 
with a blower exhaust system capable of main- 
taining a slight negative pressure within the 
building. Exhaust from the blowers is filtered 
before discharge to the atmosphere through a 
stack. This type of containment was discussed 
more fully in a previous issue of Nuclear 
Safety" 

In contrast to these attempts to reduce costs 
by reducing pressures, the SPWR and the CVTR 
will be housed in containment buildings which, 
like steel pressure vessels, are designed to 
withstand full pressure in the event of an ac- 
cident but which will be less costly because of 
the use of different methods of construction. 
The proposed containment shell for the SPWR 
consists of a steel shell faced on both sides 
with reinforced concrete. The structure is 
designed so that the load is evenly divided; that 
is, one-half is to be taken by the steel shell, 
and the other half is to be taken by the rein- 
forced-concrete structure. 

The containment building for the CVTR will 
be fabricated of reinforced concrete lined with 
%-in. sheet steel in the cylindrical sections, 
and it will be capped with a hemispherical steel 
head. None of the presently proposed plants 
use prestressed concrete, although it will be 


used in the Heavy Water Components Test Re- 
actor at Savannah River. The use of concrete 
for containment buildings and pressure vessels 
was discussed previously in Nuclear Safety. 


In some cases, factors exist which make it 
advantageous to maintain a reasonably high- 
pressure atmosphere around the reactor. For 
example, the FWCNP, being CO,-cooled, is 
enclosed in a standard cylindrical steel pres- 
sure vessel. In contrast to the large-volume 
building designed to decrease the pressure of 
BONUS, the containment shell for the FWCNP 
is designed with a small volume to assure a 
reasonably high pressure of 27 psig after an 
accident so that the main coolant blowers can 
continue to supply sufficient coolant to remove 
afterheat from the core. Of course, this in- 
centive exists only for gas-cooled reactors. 


In addition to variations in the type of con- 
tainment structure as dictated by pressure 
criteria, there are many variations in leakage- 
rate tolerances, in methods for sealing pene- 
trations, and in provisions for shock-wave and 
missile protection. The information available 
in the hazards reports for the currently operat- 
ing and proposed U. S. power reactors has been 
summarized in Table IV-1 in order to point up 
these variations. (The data in Table IV-1 were 
obtained from the hazards reports, most of 
which are listed in Section III, references 14 to 
29.) As indicated, most pressurized-water and 
boiling-water plants are contained in steel 
pressure vessels, and most of the containment 
structures are designed to withstand the pres- 
sure generated by either a release of the pri- 
mary coolant or the primary coolant plus a 
fraction of the secondary coolant while expand- 
ing adiabatically to equilibrium with the atmos- 
phere within the containment structure. In order 
to be conservative, credit is not usually taken 
for the effects of pressure-reduction systems 
or the cooling effects of the shell and the en- 
closed equipment. The systems that include 
means for pressure reduction are indicated in 
Table IV-1. 

The quite different containment structures 
designed for the two sodium-cooled reactors, 
Hallam and Enrico Fermi, emphasize the ef- 
fects of the differences in the postulated maxi- 
mum credible accidents. The sodium ‘coolant 
in these reactors is circulated at near atmos- 
pheric pressure, but, as is well known, sodium 
is extremely reactive with air. By operating 
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the components of the primary cooling system 
in a nitrogen atmosphere in steel-lined shielded 
cells blanketed by a nitrogen atmosphere, the 
Hallam designers felt that the sodium-air re- 
action would be avoided. Thus the Hallam con- 
tainment consists of the steel-lined cells backed 
up by a secondary containment afforded by the 
partially evacuated building structure. On the 
other hand, the containment structure for the 
Enrico Fermi plant is designed to withstand 
the 32-psig pressure from the sodium-air re- 
action, even though the sodium system compo- 
nents will operate in a low-oxygen environment. 


Leakage Specifications 


It has been found that conventional steel 
shells that have quite low leakage rates can be 
built; for example, ~0.15 per cent per day at 
the PWR plant, <0.02 per cent per day at the 
VBWR plant, and ~ 0.016 per cent per day at 
the Dresden plant. The design leakage rates 
for conventional steel shells, however, vary 
from 0.06 per cent per day at the Enrico Fermi 
plant to 0.2 per cent per day per pound per 
square inch gauge at the Piqua plant and up to 
320 per cent per day for the outer building at 
the Hallam plant. For the most part, the 
specified leakage rates have been based on the 
exposure at the site boundary or the nearest 
inhabited area. Normally, the maximum per- 
missible internal and direct exposures at the 
point of concern are established and then re- 
lated to the atmospheric conditions and the 
calculated fission-gas release into the con- 
tainment structure to establish the allowable 
leakage rate. Although conservative assump- 
tions are usually made, the results of these 
calculations are subject to rather large un- 
certainties, particularly at low wind velocities 
(see Section V, “Maximum Credible Accident 
Exposure Doses at Reactor Site Boundaries’’). 


Various methods of leak testing the contain- 
ment structures are described in the hazards 
reports. Exhaustive leak-testing provisions are 
being made for some structures; for example, 
the steel sphere at the Yankee plant will include 
a reference-pressure testing system” ’* that 
Will be available for continuous leakage testing 
during operation. Prior to operation, the sphere 
will be tested by the soap-bubble method and, 
possibly, the Freon or helium leak-detection 
method. The welds of some structures are to 
be radiographed (for example, the FWCNP steel 


pressure vessel); whereas, in contrast, only 
spot checks of the welds of the Piqua and 
BONUS containment structures are planned. 
The leak-testing methods to be used for the 
various plants are listed in Table IV-1. 


Penetrations of Containment Structures 


The problems involved in sealing contain- 
ment structures in the event of an accident, in- 
cluding the sensing of the need for sealing, are 
numerous. The Indian Point, Yankee, Saxton, 
N.S. Savannah, and CVTR containment vessels 
will remain sealed during operation. The PWR, 
SPWR, Dresden, Pathfinder, BONUS, Big Rock 
Point, Enrico Fermi, FWCNP, Peach Bottom, 
and Piqua containment shells will be ventilated 
during operation, but the ventilation ducts will 
be closed in the event of an accident. Not all 
the hazards reports describe the properties 
that will be sensed to activate the ventilation 
closing valves or the types of instruments re- 
quired. At Yankee the vapor container is sealed 
at all times when the reactor is critical or the 
main coolant system is pressurized. In the 
SPWR, the ventilation ducts will be closed 
automatically upon the detection of a high pres- 
sure in the building. The Elk River and Piqua 
shells will be closed by a high activity level; 
the Pathfinder, by high activity level; BONUS, 


Peach Bottom, and PWR by high activity level 
or excessive building pressure; and Big Rock 
Point, by low reactor pressure, reactor scram 
signal, high pressure in enclosure, and loss of 
auxiliary power. 


Dependence upon the sensing of a high ac- 
tivity level in the containment structure as the 
basis for closing ventilation ducts and other 
penetrations does not take advantage of the 
time lag between loss of coolant and the onset 
of fuel-element failure. -It would appear that it 
would be advantageous to reduce the initial 
pressure rise by venting the relatively uncon- 
taminated gas in the containment shell in the 
first few seconds after the accident. The pene- 
trations could then be closed automatically 
when release of activity by the fuel elements 
was sensed. The degree of pressure reduction 
that could be obtained by using this scheme 
would depend on the settings of the activity 
monitors in the containment shell. If the moni- 
tors were set so that the activity normally 
carried by the coolant would activate the valve- 
closing mechanisms, the pressure reduction 
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obtainable would be small. On the other hand, 
if the activity monitors were set to sense fuel- 
element failures, it would be essential for the 
valve-closing mechanisms to operate rapidly. 
A further disadvantage of dependence on the 
activity level as the indication of the need for 
closing the penetrations is that the instruments 
available for detecting activity are less reliable 
than those for detecting pressure. It is there- 
fore recommended that two independent proper- 
ties, such as activity and pressure, be used to 
activate the mechanisms for penetration closure. 
As may be seen in Table IV-1, most plants are 
designed to operate in this manner. 

In some plants, activation of the closure 
mechanisms by spurious signals would not be 
particularly troublesome, but, in other plants, 
unnecessary closure of steam lines and other 
process piping could cause difficulties of such 
magnitude as to justify multiple sensors and 
instrument channels. A minimum requirement 
would be a two-out-of-three system,** in which 
three completely independent channels would 
convey information to the closure mechanisms. 
The desired operation could be initiated only by 
activation of at least two of the channels. Since 
the probability that two channels would give 
spurious signals at the same time is small, the 
possibility of unnecessary operation of the 
closure mechanisms would be greatly decreased. 
Also, it would be necessary, of course, to pro- 
vide for one-out-of-two operation while repair- 
ing any one instrument channel. It is the opinion 
of the reviewer that the problems of instru- 
mentation and control of mechanisms for seal- 
ing penetrations of containment vessels are of 
sufficient importance to require more attention 
than that indicated by the available hazards 
reports. 

The number of penetrations of the contain- 
ment structure, if available, is listed for each 
reactor described in Table IV-1. It is evident 
that many penetrations are required for instru- 
ment lines, process piping, and electrical con- 
nections. Not all the penetrating lines are 
connected to sources of direct or potential con- 
tamination, but many are. In calculating ex- 
posure doses at positions external to contain- 
ment vessels, the possibility of one or more 
automatic valves not sealing the penetration 
has not usually been considered in the hazards 
reports (except in the case of the PWR), al- 
though the probability that this will happen 
increases with the number of penetrations that 


must be closed. In most cases the closure 
valves will be accessible so that they can be 
closed manually if the automatic device fails. 
In some hazards reports, however, this aspect 
of the problem is not clearly resolved, and no 
statement is made as to the administrative 
action to be taken to ensure that the valves are 
checked and manually operated when necessary. 


Shock-Wave Protection 


The possible need for shock-wave protection 
has been discussed only in the hazards reports 
for the Enrico Fermi and Piqua plants. The 
containment shell for the Fermi plant was 
analyzed and found to be of sufficient strength 
to withstand a force equivalent to 330 lb of TNT 
with no permanent yield and to 1000 lb of TNT 
without rupture.** The Piqua plant containment 
vessel is designed to withstand the explosion of 
the 35,500 mg/m? of Santowax-R dust that could 
be accumulated from small leakage of coolant, 
although the concentration of the dust is to be 
maintained at no greater than 94 mg/m’, which 
is well below the concentration that constitutes 
an explosive hazard. Blast effects can be a 
problem in a pressurized-water system ifthere 
is an instantaneous primary system failure as 
the result of extremely rapid flashing of the 
water to steam upon decompression.*” Although 
not explicitly stated, the large amounts of con- 
crete that make up the biological shields around 
reactor cores and the factors of safety inherent 
in the designs of the containment shells provide 
some measure of blast protection. The effects 
of blasts on containment shells were considered 
more fully in a previous issue of Nuclear 
Safety.*® 
Missile Protection 

Missile protection is also provided by the 
biological shield, but in some plants extra 
shields are required in certain areas. For 
instance, at the Yankee plant there are 1- and 
2-in. steel plates backed by 18 in. of concrete 
above the control-rod drive mechanism. The 
VBWR has an 18-in.-thick steel shield above 
the core when the operating power exceeds 
10 Mw. In some cases the steel containment 
shell is lined with concrete. In other cases 
the missile problem is dismissed on the prem- 
ise that the main components are made of 
ductile materials that are not likely to gen- 
erate missiles, and the high-speed rotating 
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machinery is located external to the steel con- 
tainment shell. In the case of the BONUS plant, 
the whole system is within the steel hemispheri- 
cal and cylindrical containment structure, but 
the turbine unit is enclosed in a missile shield. 


Conclusions 


The information presented here is incom- 
plete because it is based almost entirely on the 
hazards reports for the individual reactors. 
Since some of the reports are preliminary, they 
cannot be expected to include the detail re- 
quired for a complete evaluation. Some data 
from Brittan’s report*® have been used; in fact, 
Table IV-1 is an expanded version of the table 
of Brittan’s report. As more information be- 
comes available, more meaningful comparisons 
can be made. The data of Table IV-1 are of 
interim value, however, in analyzing the various 
containment concepts. (M. H. Fontana) 
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V CONSEQUENCES OF ACTIVITY RELEASE 





Dosimetry Aspects 
of Nuclear Accidents 


There have been seven major nuclear accidents 
since the beginning of the Manhattan Project 
which have involved significant exposures of 
personnel to ionizing radiation. These accidents 
are reviewed here in chronological order, and 
the sequence of events and conditions of expo- 
sure pertinent to an understanding of the physi- 
cal dosimetry aspects of the accidents are de- 
scribed. 


Since the first of these accidents, almost 15 
years ago, there has been continuous improve- 
ment in the techniques and concepts of radiation 
dosimetry. For example, dose units such asthe 
gram-roentgen are no longer believed to be ade- 
quate indices of radiation exposure, and time 
has served to accentuate the complexity of the 
RBE (relative biological effectiveness) concept. 
An effort has therefore been made inthis review 
to use the more recent techniques of radiation 
dosimetry to reevaluate the doses that were 
previously assigned to certain individuals in- 
volved in nuclear accidents. 


In order to put the physical dosimetry of past 
accidents on a common and objective basis, the 
dose to a given individual is specified in terms 
of the absorbed dose (in rads) which would have 
been received by a small mass of soft tissue 
located at the position of the individual. This 
dose is referred to as the “first-collision dose,” 
consistent with common usage. This definition 
of first-collision dose is not, however, con- 
sistent with the mathematically convenient defi- 
nition given by Snyder.' His definition refers to 
the energy per gram imparted toa small-volume 
element of tissue located at a given depth below 
the surface of the body by neutrons that have 
made no collisions until they reach the point in 


question. Since correlations of biological data 
with a single dose reading are far from perfect 
unless physical conditions of the exposure other 
than the energy imparted are specified, as much 
information as is available on the parameters 
of each accident has also been considered. 
First-collision doses are given, for example, in 
terms of rads to soft tissue for neutrons and 
gamma rays separately. This procedure is con- 
sistent with the desirability of establishing RBE 
factors for acute irradiation of man based on 
accident data. 

Measurements of the formation of Na” in the 
body via the reaction Na?*(n,y)Na’4 have been 
found’ to give the most reliable evaluation of the 
neutron dose to persons exposed in mixed- 
radiation fields. The neutron dose to the body 
is related to the spectrum of incident neutrons, 
which is determined from threshold-detector 
measurements. This method of dose measure- 
ment has been termed “spectral” dosimetry.’ 
The relation between the Na” formation in the 
body and the neutron spectrum is simple, and, 
if the neutron spectrum escaping from a critical 
assembly can be estimated or measured, the 
Na” activation in a man may be interpreted in 
terms of the first-collision dose at his position. 
This method has been used here for the re- 
evaluation of the doses involved in accidents 
for which data on spectral distribution of neu- 
trons were available or couldbe estimated. Es- 
timates of the gamma-to-neutron dose ratio have 
been used for assigning both gamma and neutron 
doses on the basis of Na”‘ activationin the body. 

Dose estimates have been made only for cases 
in which the radiation exposure was acute, ex- 
ternal, penetrating, and generalized. Doses from 
alpha and beta radiation, either internal or ex- 
ternal to the body, have been neglected because 
they are thought to be relatively unimportant in 
the usual criticality accident. 
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Los Alamos Accident LASL-! 


The first nuclear accident occurred‘ at the 
Los Alamos Scientific Laboratory, Los Alamos, 
N. Mex., in August 1945. During a criticality ex- 
periment involving a metal system, there was a 
nuclear excursion, and two people were exposed 
to the resulting mixed-radiation field. Case 
LA-1, who died following the accident, was 
touching the assembly when the chain reaction 
was initiated, and he received a very high dose 
to his hands and a smaller dose to the bulk of 
his torso. He was exposed to considerable 
gamma radiation from fission products while 
dismantling the experimental system, and he 
would possibly have survived had he left the 
room immediately. His actions during this pe- 
riod are not well known, and the total dose he 
received is correspondingly uncertain. Neither 
he nor the other exposed person was wearing a 
film badge at the time of the accident. Since the 
number of fissions that occurred inthe assembly 
was not known accurately, the best index of his 
neutron exposure was the Na” activity induced 
in his blood. 


As stated above, the Na” activity in the blood 
may be related to the number of incident neu- 
trons if the energy distribution of the neutrons 
is known. In order to determine the first- 
collision dose in this case, the neutron spectrum 
of the excursion was assumed to be similar to 
that of the Godiva reactor, an unreflected (bare) 
reactor’ studied at Los Alamos in 1956. It was 
further assumed that the accident spectrum did 
not vary with distance over the range at which 
the exposure occurred. It is known that the at- 
tenuation of the tamper around the critical ex- 
periment was not high.® The relation between 
Na” activity (in disintegrations per second per 
milliliter of blood serum) and the spectral dis- 
tribution given by Godiva threshold-detector 
measurements (Table V-1), as corrected,’ was 
then used to establish the neutron dose correla- 
tion, i.e., 


Dn= 5.0K 


where K is the activity of the blood serum in 
disintegrations per second per milliliter, D, is 
the neutron dose in rads, and 5.0 is the relation 
between the Na” activity and the neutron spec- 
tral distribution.’ It is known that the quantity 
of Na in blood serum is remarkably constant 
in man at the value of 3.2 mg/ml (see refer- 


Table V-l FAST-NEUTRON LEAKAGE SPECTRUM 
FROM GODIVA REACTOR 








Relative 
Detector flux* 
Pu2*? (2-cm B’*) (n, f) 1.00 
Np”"" (n,f) 0.86 t 
U8 (n, f) 0.46 
s*? (n,p) 0.21 





*Measurements were made in August 1956. At 1 
meter from the center of the Godiva reactor, the ac- 
tual plutonium flux was 3.0 x 10° neutrons/cm? for 
2.04 x 10'® fissions. 

tThis value includes a correction for the new fis- 
sion cross-section value for Np**? of 1.6 barns, based 
on a personal communication from R. B. Murray, Oak 
Ridge National Laboratory (see also reference 7). 


ence 1), and this fact has been used in converting 
from activity per unit mass of Na” to activity 
per unit volume of blood. A neutron dose of 288 
rads was obtained for this case, based on the 
Na”4 value for Case LA-1 given in reference 8. 
The data for this case and theother Los Alamos 
accidents discussed below are summarized in 
Table V-2. 

Case LA-2, who was exposed at a greater 
distance from the reactor than Case LA-1, did 
not remain in the vicinity after the excursion. 
Again, based on measurements of the gamma- 
to-neutron dose ratio for leakage from the 
Godiva reactor, it is estimated that the gamma- 
to-neutron dose ratio was approximately 1:10 
for Case LA-2 in the LASL-I accident. It was 
assumed that the ratio was independent of dis- 
tance from the source for the distance involved. 
The estimated first-collision dose for Case 
LA-2 is given in Table V-2. 


Los Alamos Accident LASL-II 


The circumstances surrounding the second 
major radiation exposure at Los Alamos, which 
occurred on May 21, 1946, were quite similar to 
those of the first accident. Personnel film- 
badge data were not available, and data from 
badges located on the walls of the room were 
not very helpful. Eight persons were exposed 
to significant radiation doses in this incident, 
and Case LA-3 died as a result. It was felt that 
none of the victims received uniform total-body 
exposures because of varying degrees of partial 
body shielding.‘ 

The neutron doses to the exposed persons 
have been estimated, as in the case of the 
LASL-I accident (i.e., by using neutron spectral 
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Table V-2 ESTIMATED FIRST-COLLISION DOSES* TO PERSONS EXPOSED IN 
LOS ALAMOS NUCLEAR ACCIDENTS 








Neutron 
Na*4 dose Gamma Total 
activity, K; (5.0K), dose, dose, 
Accident Reference Case dis/(sec)(mg) dis/(sec)(ml) rads rads rads 
LASL-I 8 LA-1 18.0 57.6 288 Uncertain 
LA-2 1.10 3.5 18 2 20 
LASL-II 9 LA-3 74.8 239.0 1190 120 1310 
LA-4 13.2 42.2 213 21 234 
LA-6 7.1 22.7 117 12 129 
LA-7 3.0 9.6 48 5 53 
LA-8 2.0 6.4 32 3 35 
LA-9 1.54 4.9 24 2.4 26 
LA-10 1.22 3.9 19 2 21 
LASL-III 20 LA-11 451 2200 “6600 8800 





*These values are based on Na” activity in blood serum. 


data obtained from the Godiva reactor, together 
with Na’ activation data for the blood of the 
patients).° The doses thus derived are presented 
in Table V-2. It was assumed, as for Case LA-2, 
that the gamma-to-neutron dose ratio was 1:10 
for all those exposed. This is probably a rea- 
sonable assumption, except for Case LA-9, who 
returned to the scene of the accident twice after 
his initial exposure. 


Argonne National Laboratory Accident 


The third reactor criticality accident oc- 
curred’® at the Argonne National Laboratory, 
Argonne, Ill., on June 2, 1952. Four persons 
were exposed to a mixed-radiation field in which 
the gamma-to-neutron dose ratio was about 
10:1. The critical assembly consisted of a 
quasi-cylindrical metallic core surrounded by 
a natural-water moderator in a plastic tank. 
There were no fatalities. 

Cases A-1 to A-3 were wearing film badges 
which were so blackened that it was necessary 
to evaluate the doses in terms of the reduced 
Silver left after development of the film. The 
gamma dose to patient A-4 was evaluated from 
a knowledge of his position and times of expo- 
sure to prompt and delayed fission gamma rays. 
The gamma dose is given by Hasterlik and 
Marinelli! in terms of first-collision dose, i.e., 
the correction for the effect of the body on the 
dose has been made. The doses were found to 
be fairly constant over the bodies of those ex- 
posed and could be considered as uniform 
whole-body irradiation. 


Threshold-detector measurements of the neu- 
tron spectrum escaping from this assembly are 
not available. However, Hasterlik and Marinelli 
quote accurate neutron dose values determined 
with proportional-counter dosimeters.'! These 
were obtained by measuring the ratio of the 
fast-neutron dose to gamma dose during an ex- 
perimental run of the reconstructed reactor and 
applying this ratio to the film-badge readings. 
The resulting dose values are shown in Table 
V-3. 


Table V-3 ESTIMATED FIRST-COLLISION DOSES 
TO PERSONS EXPOSED IN ARGONNE NATIONAL 
LABORATORY NUCLEAR ACCIDENT 








Gamma dose,* Neutron dose,t Total dose, 
Employee rads rads rads 
A-1 145 14,2 159 
A-2 116 9.6 126 
A-3 55 5.5 60.5 
A-4 10 , 0.8 10.8 





*These values were obtained from readings of the re- 
duced silver left after development of the film badges; 
corrected for buildup in air and for body shielding. 

{Based on gamma-to-neutron dose ratio and film-badge 
readings; values are precise to ~10 per cent, based on 
dosimetric measurements obtained during reconstructed 
accident. 


USSR Accident 


At some undisclosed time prior to July 1956, 
a reactor accident occurred in the USSR which 
caused “short, general, external” exposure of 
two persons to neutrons and gamma rays. The 
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clinical results of the exposures have been de- 
scribed by Guskova and Baisogolov.” They as- 
signed doses of 300 and 450 “r” to the exposed 
people. The gamma-to-neutron ratio in the ra- 
diation field is not given in their report, how- 
ever, and no information concerning the struc- 
ture and composition of the reactor is presented 
on which to base an estimate of the ratio Fur- 
thermore, the methods of dosimetry used are 
not described, and the dose assignments must 
therefore be regarded as ambiguous. 


Oak Ridge Accident 


A criticality accident occurred on June 16, 
1958, at the Y-12 Plant at Oak Ridge, Tenn.?’!® 
Criticality was reached when an aqueous solution 
of an enriched uranium compound was drained 
inadvertently into a waste drum having dimen- 
sions which permitted a critical mass to be 
formed. Eight persons received general whole- 
body radiation doses, and five of the eight re- 
ceived total doses in excess of 200 rads. There 
were no fatalities. 


None of those exposed to the radiation field 
were wearing film badges, and therefore blood 
sodium radioactivity was chosen as the most 
reliable measure of the neutron dose in thisac- 
cident. The neutron dose to a man at a given 
distance from the assembly was deduced from 
the Na*‘ concentration in his body by employing 
a mockup reactor and a “phantom” (inthis case, 
a burro). The phantom was exposed to the neu- 
tron field escaping from a mockup reactor of 
dimensions and composition similar to those of 
the accident assembly. The Na” concentration 
in the blood serum of the phantom after exposure 
to a measured first-collision neutron dose was 
determined and used to convert the Na‘ activity 
data for the exposed persons to first-collision 
neutron doses, assuming that the neutron spec- 
trum did not vary with distance from the reac- 
tor. During another run of the same mockup 
reactor, a measurement of the gamma-to- 
neutron dose ratio was made for use in deter- 
mining the gamma doses. Corrections were 
made for the different contributions from 
fission-product gamma rays in the two cases. 
Calculations? based on the neutron and gamma- 
ray leakage spectra from the mockup reactor 
gave dose estimates that agreed well with the 
values based on the Na” activity of the indi- 
viduals. The doses of the exposed persons are 
given in Table V-4. 


Table V-4 ESTIMATED FIRST-COLLISION DOSES* 
TO PERSONS EXPOSED IN OAK RIDGE 
Y-12 NUCLEAR ACCIDENT 





Neutron dose, Gamma dose, _ Total dose, 
Employee rads rads rads 





OR-1 96 269 365 
OR-2 89 250 339 
OR-3 86 241 327 
OR-4 71 199 270 
OR-5 62 174 236 
OR-6 18 50.5 68.5 
OR-7 18 50.5 68.5 
OR-8 6 16.8 22.8 





*These values are based on Na” activity in blood se- 
rum. 


, 


Yugoslavian Accident 


In an accidental supercritical excursion ofa 
zero-power reactor on Oct. 15, 1958, at the 
Boris Kidrich Institute of Nuclear Sciences in 
Vinca (near Belgrade), Yugoslavia, eight persons 
received doses of neutrons and gamma rays 
above the maximum permissible concentration.“ 
One man died as a result of the irradiation. 

The reactor was a natural-uranium heavy- 
water unreflected assembly in a cylindrical tank 
approximately 2 meters high and 2 meters in 
diameter. The exposed persons were located in 
the range of 3 to 8 meters from the reactor at 
the time of the excursion. 

Although incomplete information was available 
concerning the spectra of neutron and gamma 
leakage from the reactor and the disposition of 
people and apparatus at the time ofthe accident, 
it was possible to make estimates of the doses 
from Na” activation data for the six patients 
treated in Paris at the Curie Foundation.'* One 
account of the accident'® stated that it was 
known, from both calculations and the ex- 
periment, that the amounts of thermal- and 
epithermal-neutron leakage from the reactor 
were equal. It seems reasonable therefore to 
take the fast-neutron leakage spectrum from 
the reactor to be roughly similar to that meas- 
ured in the Y-12 accident study.” Hence it has 
been assumed that the total neutron spectrum ip 
the Yugoslavian accident was equal to that inthe 
Y-12 case for epithermal energies (>5 kev) and 
that the thermal-neutron flux was equal to the 
total flux above 5 kev. Based on these assump- 
tions and the spectral dosimetry method? de- 
scribed above, the neutron dose correlation was 
found to be 
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Dn = 3.92A 


where D, is the neutron dose in rads and A is 
the total measured Na” activity in the body in 
microcuries. The values of A for the various 
patients and the estimated doses they received 
are given in Table V-5. Values are also given 
in Table V-5 for the concentration, K, of the 
activity in the blood serum, based’’ on the 
amount of Na” in each individual being 105 g. 


Table V-5 ESTIMATED FIRST-COLLISION DOSES* 
TO PERSONS EXPOSED IN YUGOSLAVIAN ACCIDENT 





K,t 
Total Na dis/(sec)(ml Neutron Gamma. Total 
activityt of blood  dose,§ dose,f dose, 
Case (A), pe serum) rads rads rads 





92.5 320 320 640 
84.6 290 290 580 
85.7 300 300 600 
71.0 250 250 500 
60.0 210 210 420 
50.8 175 175 350 





*Based on the total Na” activity in the body of the ex- 
posed person. 

{Total Na” activity (A) in exposed individual; data are 
taken from reference 15. 

{Based on 70-kg standard man containing 105 g of Na” 
(see reference 17); K=1.13A, 

§Based on fast-neutron spectrum being the same as for 
the Y-12 accident and there being one thermal neutron for 
each fast neutron; D, = 3.47K. 

{Based on gamma-to-neutron dose ratio of 1:1 (see 
references 16 and 18). 


The gamma doses given in Table V-5 were 
deduced from a reported measurement! !6,18 of 
a gamma dose of 1 mr/hr at a thermal-neutron 
flux level of 155 neutrons/(cm’)(sec) around the 
reactor when operated in earlier experiments. 
From this value and measurements of the 
neutron-to-gamma dose ratio around similar 
reactors, it was estimated that the neutron-to- 
gamma dose ratio was approximately 1:1. 


los Alamos Accident LASL-III 


The most recent serious exposure ofa person 
to radiation occurred on Dec. 30, 1958, at the 
los Alamos Scientific Laboratory.'® In the 
course of a routine plutonium salvage operation, 
the material attained a critical state. Case 
LA-11 (see Table V-2) was standing in close 
Proximity to the critical system and received 
a lethal dose. 

If it is assumed that the neutron and gamma- 
tay fields were comparable with those measured 


in the Y-12 mockup experiment,” the neutron 
dose may be approximated as 


Dy = 5.2K 


The value of K was found” to be 451 dis/(sec) 
(mg). This relation between D, and K is nearly 
the same as that derived from the Godiva meas- 
urements. Based on this relation, the fast- 
neutron dose received by Case LA-11 was 2200 
rads, and, using a gamma-to-neutron ratio of 
3:1, the gamma dose was 6600 rads, as indi- 
cated in Table V-2. 

The foregoing analyses of the seven major 
accidents show clearly that the dosimetric as- 
pects left much to be desired. The need for ac- 
curate data in an accident situation is super- 
seded only by the need for a rapid determination 
of the dose. Careful considerations of these 
needs led to the recommendation of the dosime- 
try system reviewed in the following subsection. 

(R. H. Ritchie) 


System for Dose Measurements 
in Radiation Incidents 


The nuclear accidents that have resulted in 
significant radiation exposures of people have 
been characterized by the lack of sufficient 
monitoring instruments and badges to give ade- 
quate indications of the doses received. In most 
cases it has been necessary to mock up the ac- 
cident in order to obtain the information re- 
quired for estimating the doses, and therefore 
the dose estimates have not been available until 
several days after the incident. A study by 
members of the ORNL Health Physics Division 
of the problems involved in obtaining dose 
measurements has led to the development of a 
dosimetry system that will give the dose to any 
individual, to within +15 per cent, in a matter 
of a few hours.’ The system is designed (1) to 
measure gamma-ray doses in the presence of 
neutrons, (2) to measure neutron doses in the 
presence of gamma rays, (3) to give information 
on the orientation of the exposed person, and 
(4) to give immediate indications of the persons 
exposed so that they may be separated from the 
unexposed persons. 


Description of System 


The equipment required to give this compre- 
hensive picture of accident doses is too com- 
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plicated and too large to be worn by each per- 
son, and therefore part of it must be placed at 
fixed locations within laboratory areas where 
an incident is possible. Such “dosimetry sta- 
tions” are of two types: complete stations and 
secondary stations. A complete station consists 
of a series of threshold detectors capable of 
measuring the spectra of fast and thermal neu- 
trons and a device for measuring the gamma 
dose in the presence of neutrons. If there is a 
radiation shield between the possible point of 
excursion and the personnel who might be ex- 
posed, two complete dosimeter stations are re- 
quired, one on each side of the shield. The 
secondary stations contain, in particular, sulfur 
and gold samples for thermal-neutron-flux 
measurements, and they are placed at numerous 
points throughout the area involved. 


The personnel in the hazardous area are re- 
quired to wear beta-gamma film badges of the 
type developed by Davis et al.,”4 which also con- 
tain sulfur and gold foils for neutron-activation 
measurements. In addition, each individual must 
wear a belt containing gamma-ray and neutron 
dosimeters at fixed intervals inorder to provide 
a means for determining his effective orientation 
with respect to the source. The dosimeters in 
the belt are glass rods for gamma-dose meas- 
urements and sulfur and gold samples for 
neutron-flux determinations. Both meas- 
urements are important because the effective 
gamma-ray and neutron doses may be different 
for different orientations. 


Principles of Dose Determinations 


The data obtained from this dosimetry sys- 
tem, together with the Na” activity in the blood 
of an exposed individual, provide the informa- 
tion needed for a determination of the neutron 
dose. The probability of neutron capture by the 
sodium in the blood has been shown to be roughly 
constant throughout the fast-neutron-flux spec- 
trum and to be about three times the probability 
of capture of incident thermal neutrons.’ Since 
the ratio of thermal-to-fast neutrons may vary 
considerably with position, the values obtained 
for activation of the blood sodium are adjusted 
to take into account the effect of thermal neu- 
trons as required on the basis of the data from 
the gold samples in the badge or belt. The 
spectrum of the fast neutrons does not vary 
greatly with distance or position, and thus the 
neutron dose can be determined by using the 


neutron dose calculated from the threshold de- 
tectors at the dosimeter station and by nor- 
malizing the flux obtained from the sulfur sam- 
ple at the dosimeter station to that obtained for 
the person from the sulfur sample in his radia- 
tion belt or film badge. The neutron dose can 
also be determined by correlating the blood so- 
dium activation measurements with direct cal- 
culations of the fast-neutron leakage spectrum, 
as described in the preceding review. 

The gamma-ray dose can be determined from 
the ratio of the gamma-to-neutron dose found at 
the dosimeter station. Since this ratio does not 
vary much with position, the gamma dose to the 
individual can be obtained by applying this ratio 
to the neutron dose he received. In some cases 
an estimate can be made by calculating the 
gamma-to-neutron dose ratio from the source 
and applying this ratio as in the first method. 

The orientation of the individual can be deter- 
mined approximately by using data obtained from 
the radiation belt. An individual may be facing 
the point of excursion and may receive his neu- 
tron dose from the front; if he then runs away, 
he will receive part of his gamma dose through 
the back. Measurements made at the ORNL 
Critical Experiments Facility using phantoms 
have indicated that the fast-neutron flux, as 
measured by the sulfur threshold detector, 
differed by a factor of 10 from front to rear of a 
person.”* The thermal-neutron-flux and gamma- 
ray doses, as measured by gold and glass do- 
simeters, differed by a factor of approximately 
2 from front to rear. 


Any immediate indicator of exposure must be 
able to show either gamma-ray or neutron 
dosage. Gamma-ray exposure may be detected, 
for example, with a chemical dosimeter in the 
badge that changes color immediately upon ir- 
radiation. Activation of indium and gold samples 
in the badge would indicate neutron irradiation; 
indium is the more sensitive, but gold has a 
longer half life. 


Mechanics of Dosimetry 


The threshold detector developed at ORNL 
provides for measurements of neutron flux in 
five energy regions.”*-*4 The thermal-neutron 
flux is determined by obtaining the difference in 
activation of gold alone and of gold surrounded 
by cadmium. The fast-neutron flux is deter- 
mined from the fission reactions in Pu’, Np*", 
U?58 | and the (n,p) reactions inS*, which provide 
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measurements of the flux above 1 kev, 0.75 
Mev, 1.5 Mev, and 2.5 Mev, respectively. From 
these measurements, the total neutron dose can 


be obtained. Since Pu*® has a high thermal- 
neutron fission cross section, the thermal neu- 
trons must be removed in order to make ita 
suitable threshold detector. In the case of 


Np?" a competing high thermal-neutron capture 
cross section gives Np”*®, which emits a 1.0- 
Mev gamma ray with a2.3-day halflife. In addi- 
tion, U”® usually contains a small amount of 
v5, which has a high thermal-neutron fission 
cross section. Therefore it is advantageous to 
shield all the fission foils from thermal neu- 
trons. A B’ shield with a thickness of 2.0 
g/cm? is sufficient to do this. 


All the foils are counted on scintillation 
counters, and thus only one set of electronic 
equipment is required. The fission foils are 
usually counted first because the fission activity 
decays rapidly. The recommended apparatus® 
consists of two 4-in.-diameter 2-in.-thick 
thallium-activated sodium iodide scintillators 
on each side of the fission foil to be counted. In 
addition, a '4-in.-thick lead filter is placed be- 
tween the foil and scintillators to reduce the 
high soft-gamma-ray background, especially in 
the case of Np**". In order to further reduce the 
background, the pulses counted are those above 
a discriminator level of 1.2 Mev. The decay 
patterns of the three fission foils are somewhat 
different, i.e., Np?*’ decays the slowest and Pu”*® 
decays the fastest, and such differences must 
be taken into account. A 1'/-in.-diameter 1-in.- 
thick NalI(T1) scintillation counter is adequate 
for counting gold foils, and with a 2.7-day half 
life there is no urgency about the determination. 
In the case of sulfur, the S**(n,p)P** reaction 
allows only the beta-ray emissions of P** to be 
counted. A 1'1/,,.-in.-diameter '/,,-in.-thick plas- 
tic scintillator is used to count the beta rays 
emitted by the P* in the 14,-in.-diameter *-in. - 
thick sulfur pellet. If there is insufficient ac- 
tivity in the sample for counting in this manner, 
the sulfur pellet is burned in a 0.001-in.-thick 
aluminum-foil dish. This treatment removes the 
sulfur and leaves the P** on the aluminum. The 
Sides of the dish are then folded down, and the 
dish is counted with a lead reflector on the op- 
posite side of the foil from the scintillator. 
Since this treatment removes the self-absorption 
of the sulfur, the counting rate is increased by 
a factor of 19 for the size of pellet used. Since 


the half life of P** is 14.3 days, there is no 
urgency in the burning or counting of the sample. 

For counting Na” activity in blood samples, 
the larger of the scintillation counters men- 
tioned above may be used; one crystal is ade- 
quate. The amount of blood required depends on 
the neutron dose. If'the dose is suspected to be 
over 100 rads of neutrons, only 10 ml of blood 
serum is needed. If the dose is less than 10 
rads, 100 ml should be taken. It is convenient 
to count only the blood serum that may be re- 
moved from whole blood by allowing it to clot 
and then centrifuging. Standard polyethylene 
boxes are used to contain the samples. If the 
samples are counted less than 4 hr after expo- 
sure, some activity due to Cl** (half life of 37.5 
min) may be found, but this activity presents no 
difficulty because the half life of Na” is 15 hr. 
For planning purposes, it may be assumed that, 
in the case of fission neutrons, the number of 
disintegrations of Na” per second per milliliter 
of blood serum is equal to one-fifth of the neu- 
tron dose in rads. 

Chemical dosimeters applicable over a 
gamma-ray dose range from approximately 5 to 
2x 10° rads can be made. Such a system may 
consist of tetrachloroethylene (TCE), which con- 
tains a small amount of free-radical chain- 
reaction retarder and which is overlaid with an 
aqueous phase containing a pH indicator. Under 
radiation these chemical chain reactions liberate 
water-soluble acids in an amount directly pro- 
portional to the dose in a given range. The 
response caused by liberation of the acid pro- 
duced can be evaluated by changes in conduc- 
tivity of the solution or by changes in pH, as 
measured electrometrically or colorimetri- 
cally. The TCE two-phase system produces 
approximately 3 to 4 per centas muchacid from 
a rad of neutrons as that produced by a rad of 
gamma radiation. Because of the lack of hy- 
drogen, the TCE system absorbs a relatively 
low amount of energy from the fast-neutron 
portion of a mixed-radiation field. When the 
dosimeter is housed in a lithium-tin shield, it 
is energy-indepencent to within +8 per cent 
from 90 kev to 10 Mev. By using Chlor Phenol 
Red as an indicator.and by comparing the light 
transmission at wavelengths of 580 and 432 my, 
as measured with a spectrophotometer, with the 
light transmission of a standard, the gamma-ray 
dose can be determined to within +3 per cent. 
The chemicals should be inspected for deteriora- 
tion and possibly replaced every nine months. 











78 NUCLEAR SAFETY 


Metaphosphate glasses containing silver may 
be used to measure gamma-radiation doses in 
the range of 5 to several thousand rads. The 
glass, in the form of small glass rods (1 mm in 
diameter and 6 mm long), and a convenient 
reader are commercially available. When the 
glass is exposed to ionizing radiation, loosely 
bound electrons are freed from negative ions. 
The freed electrons migrate through the glass, 
and some of them are trapped by interstitial 
silver ions to form a special type of F-center. 
When the F-center, or photoluminescent center, 
is excited by ultraviolet light, it returns to the 
ground state by emitting a photon in the red 
region (6400 A). Since the response increases 
for several hours after exposure, the glass rods 
are usually read after 24 hr. A 0.020-in.- 
tantalum, 0.015-in.-Teflon filter is sufficient to 
reduce the energy dependence to within +10 per 
cent above 40 kev. The response of the glass 
rods to fast neutrons is negligible compared 
with the response to gammarays. The response 
to thermal neutrons is sufficiently high to ne- 
cessitate encapsulation in lithium cans for ac- 
curate measurement of gamma-ray dose in a 
thermal-neutron ‘field. The small dimensions of 
the glass justify the use of lithium enriched with 
Li®. A shield of 4-in.-thick 96 per cent Li® ma- 
terial is sufficient. 

The recently modified ORNL badge provides 
for two dosimeter films, with plastic and metal 
sheets as filters. A 0.5-g pellet of sulfur and a 
'’,,-in.-diameter 0.005-in.-thick gold foil are 
included in a cavity in a slide, anda 1'/,- by '/,- 
by 0.015-in.-thick indium foil perforated with 
an identification number is located in the front 
of the badge. Chemical and/or silver phosphate 
glass dosimeters can be added as desired. The 
Du Pont film packet 553, which has a hard- 
gamma-ray dose range of 50 to 50,000 milli- 
rads, is used in conjunction with the filters for 
routine beta-gamma dosimetry. The Eastman 
NTA film, which has a range of 20 to 10,000 
millirads for 2-Mev neutrons, is used for rou- 
tine neutron dosimetry. Chemical or glass type 
dosimeters are included in the badges of indi- 
viduals who work in areas where a radiation 
incident that would cause a high gamma-ray 
exposure couldoccur. Sulfur, gold, and cadmium 
detectors are installed at dosimeter stations to 
provide for neutron dose determinations. The 
indium and gold foils in the badges would pro- 
vide a quick method of identifying the individuals 
with high neutron exposures in the event of a 


nuclear accident, and the chemical dosimeters, 
which would change in color from red to yellow 
upon receiving a gamma dose of 25 rads, would 
indicate those individuals with high gamma-ray 
exposures. 

As mentioned above, this dosimetry system 
evolved from studies of problems that were en- 
countered following radiation accidents. The 
minimum recommended system’ for use in areas 
where a nuclear incident might occur consists 
of threshold detectors, chemical and/or glass 
dosimeters, and facilities for counting Na”‘ ac- 
tivity in blood serum. If available, the film- 
badge package and radiation belt should be 
added. (F. J. Davis) 


Ocean Disposal 
of Radioactive Waste 


The contamination of water resources with 
radioactive waste effluents presents complex 
problems. Since there is limited quantitative 
information on the physical, chemical, and bio- 
logical processes occurring in aquatic environ- 
ments, the disposal of radioactive waste by 
discharge into bodies of water must be governed 
by seemingly conservative regulations. As the 
ecologist supplies additional information on the 
cycling and accumulation of radionuclides in 
such environments, the regulations may be 
modified to permit more complete utilization of 
the diluting and dispersing capacities of water 
bodies. 

The recent Congressional hearings’’ on indus- 
trial radioactive waste disposal and the discus- 
sions at the International Scientific Conference 
on the Disposal of Radioactive Wastes”® em- 
phasized the grave concern that exists with re- 
spect to the suggestion that radioactive waste 
be discharged into the ocean. During the first 
five days of the Congressional hearings, there 
was little public concern; however, on the day 
that the disposal of low-level radioactive waste 
into the ocean was discussed, 18 members of 
Congress appeared before the Joint Committee 
on Atomic Energy, or submitted statements to 
it, protesting the sites suggested for disposal of 
packaged low-level waste in the report of the 
National Research Council (NRC) of the National 
Academy of Sciences (NAS). In fact, that par- 
ticular session of the hearings was scheduled 
because of public reaction to the report “Radio- 
active Waste Disposal into Atlantic and Gulf 
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Coastal Waters,”*'’ which presents the results 
of a study of the feasibility of using selected 
areas in the Atlantic Ocean and Gulf of Mexico 
coastal waters as receiving grounds for the dis- 
posal of packaged low-level radioactive waste. 
The limiting rate of disposal was set so that 
the physical and biological processes in the 
ocean would not return the radioactivity to man 
at a rate above the maximum permissible rate 
of ingestion of a given radionuclide in drinking 
water. Based on this limitation, 28 sites re- 
moved from submarine cable operation and fish- 
ing activities in the Atlantic and Gulf of Mexico 
coastal areas were recommended, provided that 
a comprehensive study of the local circulation 
and the biota confirmed the feasibility. Coastal 
estuaries and bays and the regions immediately 
seaward of these areas were specifically re- 
jected because shoreward transport along the 
bottom in those regions would tend to intensify 
the rate of return of a contaminant to man. 

The rate of disposal of radioactive waste in 
the coastal waters was based upon the maximum 
permissible concentrations of radioactive iso- 
topes in sea water which will not lead to haz- 
ardous exposure of a human whose sole source 
of protein is fish, taking into account the ca- 
pacity of marine organisms to accumulate vari- 
ous isotopes above the level of their environ- 
ment. 

In addition, the NRC report?’ recommended 
that no more than 250 curies of Sr™ or the 
equivalent of other isotopes be discharged to 
any one disposal area in one year, with a maxi- 
mum monthly limit of 100 curies; the waste was 
to be floatproof and to be discharged in float- 
proof containers. Adjacent disposal areas were 
to be separated by at least 75 miles, witha 
maximum of three disposal areas in a 300-mile 
section of the coastline, unless exchange be- 
tween disposal areas was impossible. Finally, 
the disposal site was to be periodically moni- 
tored to measure the spread of the radioac- 
tivity. 

The major Congressional criticisms of the 
report were that some ofthe sites recommended 
for study were as shallow as 42 ft (Site 11a, 
which was to serve Galveston, Tex.) andas close 
to shore as 10 miles (Site 2a, which was to 
serve Providence, R. I.) and that the sites were 
selected without preliminary study. Most of the 
criticisms ignored the fact that these were only 
Suggested sites that were subject to change 
Prior to disposal operations after detailed ex- 


amination. The Pacific Coast has not been neg- 
lected as a disposal site, but the report on ra- 
dioactive waste disposal into Pacific coastal 
waters has not yet been released. 


U. S. Ocean Disposal Practices 


To date the United States has disposed of ap- 
proximately 8000 curies of packaged radioactive 
material into the Atlantic Ocean, as well as the 
reactor structure of the Seawolf prototype, and 
approximately 14,000 curies of packaged radio- 
active material into the Pacific Ocean.”* No 
disposals have been made into the Gulf of 
Mexico. 

The U. S. coast line is 4840 miles long,* and, 
if a disposal area 50 miles seaward from the 
coast and a total fallout of 40 millicuries of Sr™ 
per square mile (average fallout over the con- 
tinental United States as of October 1958) are 
assumed, approximately 10,000 curies of stron- 
tium alone has already fallen on the 50-mile- 
wide area of ocean contiguous to our shores. 
Since Sr™ has a yield of only 5.8 per cent, it is 
obvious that considerably greater quantities of 
radioactive materials have fallen on our coastal 
areas than have been purposefully discharged 
there. 

Disposal of high-level radioactive waste has 
been limited to storage under controlled condi- 
tions. Work by Bogorov and Kreps’® and by 
Piccard and Walsh*® has shown that even the 
ocean trenches at depths of over 30,000 ft have 
organisms and circulation. Bogorov and Kreps 
state that radioactive waste compounds dumped 
into an ocean trench and dissolved will inevita- 
bly be brought to the upper layers of the ocean 
in regions exploited by man and that sooner or 
later they will be absorbed by vegetable and 
animal organisms, fishes, andmammals. Hence 
there are no natural regions for isolated storage 
in the ocean, and only low-level waste can be 
safely discharged. 


Utilization of the Sea for Waste Disposal 


Although there are large gaps in the knowl- 
edge of the physics, chemistry, and biology of 
the oceans, enough information is available for 
making conservative estimates of the safe 
amounts that can be discharged. Perhaps the 





*Length of general shore line, as given by the U. S. 
Coast and Geodetic Survey. 
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most comprehensive compilation of oceanic in- 
formation is contained in The Oceans.*! Amore 
recent volume is devoted solely to the effects 
of atomic radiation on oceanography and fish- 
eries.*? This work details present knowledge of 
the fate of fission products discharged to the 
ocean and points out the areas where additional 
research is required. It is stated** that more 
information is needed on (1) water movement as 
a result of convection and eddy diffusion, (2) the 
role of the ecological system in the transport of 
elements in the sea, (3) the precipitation of 
fission-product elements by physical, chemical, 
and biological processes, and (4) the uptake, ac- 
cumulation, and loss of radionuclides by aquatic 
organisms. 

Based on the present knowledge of the fate of 
fission products in the marine environment, 
another working group of the NRC has reported 
on considerations relative to the disposal of 
radioactive waste from nuclear-powered ships 
into the marine environment.*® The purpose of 
this report was to provide an evaluation of the 
potential capacity of the marine environment to 
receive certain radioactive waste materials 
originating from normal operations of nuclear- 
powered ships having water-cooled reactors. It 
was assumed that sea disposal should contribute 
no more than one-third of the maximum per- 
missible intake of radioactive material, and the 
operation of 300 ships powered with 60-Mw re- 
actors was considered. The conclusions of the 
study were that (1) no waste should be dis- 
charged in harbors, estuaries, and coastal wa- 
ters out to 2 miles from the shore line; (2) in 
the coastal area from 2 to 12 miles from the 
shore line, liquid waste could be discharged if 
no single discharge contained more than 0.5 
curie of radionuclides with half lives greater 
than 6 hr; (3) on the outer continental shelf 
from 12 miles offshore to the 200-fathom ccn- 
tour line, spent ion-exchange resins could be 
discharged in batches of up to 50 curies into 
nonfishing areas if the ship were under way and 
more than 3 miles from a neighboring vessel 
and if the spent resins were denser than sea 
water; (4) beyond the 200-fathom contour line, 
spent ion-exchange resins could be discharged 
in batches of up to 500 curies if no ship made 
more than one such discharge per month and if 
no such discharges were made in the major 
oceanic fishing areas. The report emphasizes 
that no solid or spent resins should be dis- 
charged into known fishing areas. In addition, 


the report strongly recommends that (1) a sys- 
tematic monitoring program be established to 
determine the consequences of the release of 
radioactive waste from nuclear-powered ships 
into the ocean and (2) records of such release 
be maintained. 


It should be emphasized that the NAS-NRC 
working groups only report and make recom- 
mendations to the AEC; it is the responsibility 
of the AEC and, ultimately, Congress, to decide 
the exact policies concerning the discharge of 
radioactive waste into theocean. Although many 
nations are considering or planning ocean dis- 
posal of radioactive waste,*4-** only Great 
Britain is presently engaged in the continuous 
disposal of liquid waste into the ocean.*® From 
June 1953 to May 1958, approximately 200,000 
curies of gross beta and 250 curies of gross 
alpha activity had been discharged from Wind- 
scale into the Irish Sea. Included in the 200,000 
curies of beta activity were approximately 5000 
curies of Sr™. Prior to the discharge of radio- 
active waste, dye was introduced into tue general 
area to determine the dispersion that would pre- 
vail.“” Based on these studies, it was shown that 
the main hazard would be from the radioactive 
materials in edible fish and seaweed and from 
the radiation field of the shore. Other risks 
were shown to be of a lower order of impor- 
tance. The preliminary studies, assuming a 
safety factor of 10, indicated that it would be 
feasible to discharge about 100 curies of beta 
activity and 0.1 curie of alpha activity per day." 


In 1952 and the first quarter of 1953, experi- 
mental discharges at a lower rate were madeto 
check the dispersion assumptions and the con- 
centrations in the fish and seaweed and on the 
shore. The studies showed that equilibrium 
conditions were achieved after discharges last- 
ing for only a few months. The short time for 
equilibrium to be achieved indicated a fairly 
rapid transfer of activity out of the immediate 
environment, including the sea bed. 

From the results of releases continuing up to 
April 1954, a release of 1000 curies per day 
was allowed, with restrictions on Sr® and Ru!™ 
content.” Results from releases since that time 
indicate that 20,000 curies per month can be 
safely released and that it may be possible to 
release as much as 100,000 curies per month.” 

Any discharge to the oceans, whether high- or 
low-level, must be made with the realization 
that there are strong objections to the practice. 
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The United Nations Conference on the Lawof the 
sea“ unanimously resolved that: 


(1) Every state shall take measures to prevent the 
pollution of the seas from the dumping of radioactive 
wastes, taking into account the standards and regu- 
lations which may be formulated by the competent 
international organizations; and (2) all states shall 
cooperate with the competent international organi- 
zations in taking measures for the prevention of 
pollution of the seas or air space above resulting 
from any activities with radioactive materials or 
other harmful agents. 


It is obvious that discharge to the ocean should 
be made only after careful scientific study and 
under extremely conservative conditions. 

(F. L. Parker) 


Biological Concentration 
of Radioisotopes 
from Aquatic Environments 


The release of liquid low-level radioactive 
wastes to fresh-water streams occurs either 
intermittently or continuously at the various 
AEC installations. Such releases of radioactive 
materials are regulated so that the maximum 
permissible concentrations in drinking water 
(MPC,,) for human consumption, as established 
by the International Commission on Radiological 
Protection (ICRP) and the National Committee 
on Radiation Protection (NCRP) are not ex- 
ceeded. It has been observed, “4/45 however, that 
the MPCy regulations consider only drinking- 
water standards, whereas additional effects may 
result from concentration of isotopes in aquatic 
food chains. Aside from the possible deleterious 
effects on the aquatic organisms, there is a 
potentially serious hazard from the addition of 
radioactive isotopes to humans by an indirect 
route,“* i.e., through consumption of fish or 
other aquatic or semiaquatic organisms. 


The problem in aquatic habitats is not entirely 
biological in that physical and chemical factors 
are also of importance. Furthermore, it is 
known that the relative importance of these fac- 
tors varies in different aquatic habitats. It has 
been shown that fission-product waste materials 
from ORNL undergo selective adsorption on 
Clay minerals in the bottom sediments of the 
Clinch River.‘ The fission products Cs‘*’ and 
Ce are readily adsorbed, whereas Sr™ re- 
mains in solution. The uptake of Cs" by emer- 


gent vegetation is greater for plants rooted in 
sand or gravel than for plants rooted in mud.“ 
Polygonum persicaria L. (smartweed) raised in 
soil in a simulated shallow-pond environment 
accumulated 450 times as much Cs"" as plants 
grown on an irrigated-field environment.*? Ce- 
sium released to a stream with a sand, gravel, 
or rock bottom is not adsorbed as strongly on 
sediment particles and therefore is more readily 
available for uptake by aquatic organisms than 
the cesium adsorbed by the finer particle muds. 
With continual releases of fission products, the 
radioactivity in the bottom sediments will in- 
crease until an exchange equilibrium is reached 
with the supernatant water. River currents bring 
in more sediment from upstream and disperse 
radioactive sediments downstream. Organisms 
living under these conditions are subject to dif- 
ferent kinds and concentrations of radioactive 
materials. Bottom-dwelling animals such as 
Chironomus (a midge) and Tubifex (a burrowing 
worm) live in direct contact with the radioactive 
muds, whereas fish and planktonic organisms 
are found in the overlying water. 


Factors Affecting Accumulation 
of Radioisotopes by the Biota 


The accumulation of radioactivity by organ- 
isms is dependent upon a number of biological 
factors. Any living organism requires for its 
growth and development a combination of ele- 
ments. These elements usually occur in the en- 
vironment in quite different proportions from 
those found within the organism. There are 
functional processes by which an organism 
either selects or discriminates against the vari- 
ous elements as they are incorporated into pro- 
toplasm. The accumulation of radionuclides by 
aquatic organisms may be associated with either 
uptake through the food chain or uptake directly 
from the water and bottom sediments. The total 
accumulation determines whether human con- 


- sumption of the aquatic organism will be haz- 


ardous. The factors that affect accumulation 
will be considered here. 

The specificity of organisms, organs, and tis- 
sues for elements used in the structure and 
metabolism of the species is one important fac- 
tor. Elements may be either concentrated or 
diluted in passing through the food chain, de- 
pending upon the organisms involved. Marine 
plankton organisms have been chemically ana- 
lyzed for 10 different elements. A diversity of 
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chemical behavior was found among the plankton 
organisms, and it was concluded that: “Certainly 
the safest generalization promises to be that, for 
any given chemical element, there will eventu- 
ally be found at least one plankton species ca- 
pable of spectacularly concentrating it.’’ The 
specificity of an organism for an element may 
be the result of a metabolic requirement ofa 
particular structure, such as iodine in the thy- 
roid or strontium and calcium uptake in bones. 

The influence of the metabolic function leads 
to a second important consideration in radio- 
muclide accumulation, i.e., the excretion of ra- 
dioactive elements is dependent upon the meta- 
bolic turnover of the particular element within 
the organism. Phosphorus and strontium, which 
are deposited in bone, do not turn over as 
rapidly as when they are deposited in soft tis- 
sues. The biological half lives of P** in the bone 
and in the liver of rainbow trout are 240 and 20 
days, respectively.*' These data were obtained in 
experiments that also showed that it takes longer 
for P*? to reach equilibrium in bone than in soft 
tissue. 

There have been differences reported regard- 
ing the mode of uptake of radioactivity by aquatic 
organisms. Uptake may occur through ingestion 
of food, absorption through tissues, or adsorp- 
tion on surfaces in contact with the medium, 
with the latter two methods of uptake being less 
likely than the first method in terrestrial habi- 
tats. There is, however, insufficient information 
available at present to permit an evaluation of 
the importance of the various modes of uptake 
by the isotopes and organisms being considered, 
and additional research is required. For exam- 
ple, the uptake of Cr®!, Cu®, P®?, As"® and rare 
earths through ingested food has been found to 
be of more importance than sorption for fish 
living in the Columbia River below the Hanford 
reactors.“ On the other hand, the uptake of 
Sr®-y™ by rainbow trout occurs both through 
food ingestion and through sorption from the 
water.” In fact, the amount of Sr®-y™ taken up 
by sorption is 10 times that from ingested food. 
Trout that were held in contaminated water and 
fed contaminated food concentrated Ssr”-y™ 
equivalent to the sum of concentrations which 
resulted in two other groups of trout, of which 
one group was held in contaminated water and 
fed uncontaminated food and the other group was 
held in uncontaminated water and fed contami- 
nated food. The passage of Cs**’ through tuna 
skin and the almost complete exclusion of Sr*® 


and Ru’ have been observed.® Thus it is ap- 
parent that the uptake mechanism varies with 
the species of organism and the radioisotope 
involved. 

The different radionuclides present in aquatic 
habitats are concentrated to varying degrees by 
different species. Concentration factors found 
upon analysis of comparable groups of organ- 
isms from White Oak Lake and the Columbia 
River have been found™ to vary from 850,000 
times for P* by filamentous algae to 50 times 
for Cu™ by fish. The authors™ concluded that 
the concentration factors of radionuclides by 
many of the lower forms of plant and animal 
life were greater than those for the higher 
forms, such as vertebrates. In general, Na”! 
Cu, and the rare earths were found to have 
concentration factors of 2000 times or less; 
whereas Fe*®, Pp?) and Sr®-y™ had concentra- 
tion factors of 10,000 times or more. (A recent 
opinion from Hanford suggests a concentration 
factor nearer 10 than 10,000 for Sr®-y™) 

The specific activity of an isotope has been 
frequently ignored in uptake studies, particu- 
larly from natural environments. At high spe- 
cific activities a greater uptake of the radioac- 
tive isotope by organisms would be expected as 
the metabolic needs for the element are met. A 
nonlinear relation for isotopic dilution has been 
found. At low and high concentrations of phos- 
phorus, with tadpoles, snails, and aquatic weeds, 
dilution was less effective than at intermediate 
concentrations. Dilution of P** with stable 
phosphorus was effective in reducing the p® 
content of carp bone over the range of concen- 
trations investigated. If isotopic dilution effects 
should prove to be a general phenomenon, the 
release of radioactive wastes to streams bearing 
a high mineral content would be advisable. 

The biological similarity of pairs of elements, 
such as strontium and calcium or cesium and 
potassium, leads to what has been called 4 
“sparing effect.” For example, radioactive 
strontium may be utilized in the metabolism of 
an organism; however, with several species of 
of fish, it was found that, by increasing the 
calcium concentration fivefold, the Sr® uptake 
was decreased by one-fifth.*® A slight sparing 
effect was exhibited with the uptake of Cs'" by 
algae at relatively high concentrations of stable 
potassium; however, stable cesium was much 
more effective.*’ 

The physiological condition of fish has been 
related to the body burdens of various radiois0- 
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topes.®-** Greater quantities of radioactive ma- 
terials are accumulated when fish are actively 
feeding. Lower levels of contamination are ob- 
served at low winter or high summer tempera- 
tures, when the fish are less active. 


Consequences of Biological Accumulation 
of Radioisotopes 


It has been pointed out*® that a human can 
drink about 2 liters of water per day froma 
source that contains a radionuclide at the maxi- 
mum permissible concentration without exceed- 
ing the allowable body burden. If the water con- 
tains fish that have concentrated an isotope bya 
factor of 1000, humans can eat only about 2 g of 
such fish per day without exceeding the permis- 
sible body burden. Concentration factors for 
cesium by fish of 5 x 10° to 10‘ have been re- 
ported; therefore it may be relatively easy for 
humans eating fish from such an environment to 
exceed the maximum permissible body burden 
of cesium. Cesium-137 is a radioisotope that 
should be regarded with caution because cesium 
concentration increases through the food chain. 
This concentration increase occurs because in- 
gested cesium is nearly completely absorbed by 
the feeding animal, and the organism will come 
to equilibrium at a higher contamination level 
than its food base.®° The behavior of cesium 
demonstrates the human hazard that exists if 
radioisotopes are concentrated through the food 
chain. (D. J. Nelson) 


Maximum Credible Accident 
Exposures at Reactor 
Site Boundaries 


The increased utilization of atomic energy as 
a4 power source imposes upon the reactor de- 
Signer, the reactor operator, and the govern- 
ment agencies that regulate the use of atomic 
energy an ever increasing responsibility to 
provide adequate safeguards to the general pub- 
lic. The present procedures for obtaining a 
construction permit and, finally, an operating 
license,*4 as well as the public hearings™ on 
these two steps, make it highly probable that 
reactor plants are designed, constructed, and 
operated in accordance with the best standards 
of engineering practice. Following the initial 
startup of a reactor, it is important to maintain 


these standards through continuing programs of 
inspection, testing, and continued evaluation of 
safety, as well as administrative control. 

In considering the safety of a particular re- 
actor at a given site, the reactor designer in- 
vestigates the various credible accidents and 
then investigates the consequences of the maxi- 
mum credible accident for both the occupants of 
the facility and the inhabitants of the surround- 
ing public areas. In those cases in which the 
maximum credible accident does not result in 
the release of large amounts of activity, it is 
common to analyze the results of a “hypotehtical 
accident,” and often the results of such an analy- 
sis are used to establish the design criteria for 
the containment of the reactcr. The pertinent 
calculations take into consideration the unique 
conditions at the reactor site, in addition to the 
reactor design and method of operation.. There 
are many uncertainties inherent in such studies 
because the initial accident analyses must be 
made before the reactor design has been com- 
pleted and before the operating procedures have 
been defined. In most cases, very little operat- 
ing experience for a similar reactor exists 
from which to derive the information required 
for an accurate analysis. 

The major factors that must be considered in 
evaluating the public-exposure hazard from the 
maximum credible accident are discussed here, 
and the estimated public-exposure doses at the 
site boundaries of the power reactors whichare 
presently operating or are in the process of 
being built in the United States are compared in 
Table V-6. The information presented in Table 
V-6 is based on the most recent hazards reports 
available to the reviewer (see Section II, refer- 
ences 24 to 43); however, because of the pre- 
liminary nature of the information in many of 
the reports (lack of information on this subject 
in some), as well as lack of detail relative to 
assumptions, the comparisons of Table V-6 may 
only be considered to be the reviewer’s inter- 
pretation. 

The data of Table V-6 indicate that public ex- 
posure at the site boundaries of the various re- 
actors, if the maximum credible accidents oc- 
curred, would, in general, be due mainly to 
inhalation of the fission products iodine and 
strontium, which result in the thyroid and bone 
doses, respectively. Inasmuch as the various 
reactor designers use different bases for com- 
puting exposure doses, a direct comparison of 
the exposure values given inthe various hazards 
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reports and tabulated in Table V-6 cannot be 
used to indicate the relative safety of the vari- 
ous reactors. As will be discussed later, the 
many factors that enter into the calculations 
must be investigated in order to determine the 
degree of conservatism associated with a par- 
ticular set of calculations. In order to obtain a 
comparison of the exposure doses to be ex- 
pected at the site boundaries of the various re- 
actors, the reviewer has computed the inhalation 
exposure dose from iodine and strontium and the 
submersion exposure dose from the noble gases 
and the halides. The resulting computed values 
are given in parentheses in Table V-6. A com- 
parison of the doses computed by the reviewer 
and those listed as derived from the reports 
[some of the results in the reports were con- 
verted to an 8-hr exposure dose in roentgens 
equivalent man (rem) for purposes of compari- 
son] indicates that, in general, the numbers 
listed in the hazards reports are substantially 
lower. The basic reason for the difference lies 
in the assumptions made for the two sets of cal- 
culations. 

The doses computed by the reviewer are based 
on the following assumptions: 

1. Submersion exposure is due only to kryp- 
ton, xenon, bromine, and iodine. 

2. Thyroid exposure is due only to radioactive 
iodine. 

3. Bone exposure is due only to Sr®® and sr” 
(a better estimate may be made by including 
Cel), 

4. The exposure time is 8 hr. 

5. Activity release is instantaneous, i.e., the 
activity release from the fuel is not assumed to 
be a function of time after the maximum credible 
accident. 

6. The leakage from the containment vessel 
is constant. 

7. The breathing rate of a person at the site 
boundary is 500 cm*/sec. 

8. The reactor has operated at power fora 
period of one year. ; 

9. The fission-product source has decreased 
only by radioactive decay. 


Based on these assumptions, the submersion 
and inhalation exposure doses from iodine and 
strontium may be expressed as 


E, = (4x 107) Péfya (1) 


Egy = 1.81/82 Ey (2) 
I 


E*= (1.75 x 107) Ey ( + 0.95478) (3) 


where E; = iodine exposure dose, rem 
Egy = Strontium exposure dose, rem 
E,, = submersion exposure dose, 
rads 
P = reactor power, watts 
B = leakage rate from containment 
vessel, per cent per day 
SS gry = fraction of iodine, strontium, 
and noble gases released from 
reactor at time of maximum 
credible accident (instantane- 
ous release) 
a= site parameter describing the 
meteorological inversion con- 
dition 


y 


The site parameter a is defined by 


enh? /Cx2-" 


(4) 


~ Cy Czuxen 
where h = height of release, meters 
Cy,Cz = diffusion coefficients in y andz 


planes 
n = stability parameter 
x = distance to site boundary, meters 
u = wind speed, meters/sec 


In order to compare the exposure doses ob- 
tained from Eqs. 1 to 4 with those given in the 
hazards reports, it is necessary to evaluate a 
number of factors which are unique to the given 
reactor design or which have been used by the 
reactor designer in his analyses. The main fac- 
tors that lead to differences in the results are 
involved in assumptions 4 through 9, discussed 
previously, and include the following: 

1. Exposure times given in Table V-6 vary 
from 4 to 12 hr. 

2. Activity release in several reactors isas- 
sumed to be a function of time, as determined 
by the rate of fuel melting. 

3. Leakage from the containment vessel is 
assumed to decrease with time as the pressure 
decreases. 

4. The breathing rates assumed vary by 4 
factor of as much as 2. : 





*For the case of an elevated release, the cloud 
gamma dosage is greater than that predicted by Eq. 3, 
out todistances comparable to the site boundary since, 
even though the cloud is aloft, the gamma irradiation 
can readily reach a receptor at the ground. 
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5. The assumed time of operation prior to the 
accident varies from less than one year to 
greater than one year. The time of operation 
influences only the calculation of the dose tothe 
bone. 

6. A decrease in the source of activity avail- 
able for release as a result of radioactive decay 
was assumed in only about one-half of the expo- 
sure calculations. This difference influences the 
thyroid dose, but it has little effect on the dose 
to the bone. 

7. Various mechanisms for reducing the 
amount of fission products available for release 
are assumed in the several reports, including 
deposition or plating out, washout by a spray 
system, cleanup with filters, and settling of ac- 
tivity inside the containment vessel as the steam 
condenses. 

8. Various assumptions were made with re- 
spect to reductions in the amount of activity 
reaching the boundary as a result of either fall- 
out or variations in wind direction. 


The activity reductions expected from these 
various mechanisms for reduction are given in 
Table V-6 for particular reactors and in Table 
\y-7 in more general terms. Inasmuch as it is 


Table V-7 MECHANISMS FOR REDUCING ACTIVITY 
IN CONTAINMENT BUILDING 





Factor of reduction 
of inhalation* 
exposure 


No, of reports 
that indicate 
activity reduction 








Mechanism by listed mechanism lIodine Strontium 
Radioactive 

decay 9 1,04 1 
Rainout (spray 

system) 3 2-20 5 
Cleanup with 

filters 2 10-20 10-20 
Deposition 1 2-5 2-5 
Scrubbing 1 >lt >1t 
Settling 1 >1t lt 





*Based on an 8-hr period; factors are only approximate. 
TMagnitude of the factor is not evaluated here. 


somewhat difficult to separate the influence of 
one reduction factor from that of another, the 
factors of reduction cited are to be regarded as 
approximate. It is, of course, necessary to inte- 
grate all the reduction factors to obtain realistic 
estimates. The reviewer has felt it necessary, 
however, to evaluate the many factors individu- 
ally when comparing the various reactors be- 


cause there is no clear-cut consistent method 
used by reactor designers in estimating accident 
exposure doses at the boundary. The purpose of 
this review is not to indicate where factors of 
reduction are justified but to point out the mag- 
nitude of these factors and to indicate their real 
importance in evaluating the hazards of anacci- 
dent. In many cases, the writers of the various 
hazards reports have not taken advantage of 
known justifiable reduction factors in order to 
be conservative. Thus the relative safety of the 
reactors listed in Table V-6 cannot be judged 
solely by either of the exposure values listed. 
It is necessary to evaluate many of the factors 
discussed below in reaching conclusions as to 
the accident exposures at any given site bounda- 
ries. 


Maximum Credible Accident 


For purposes of this review, the maximum 
credible accident is defined as the accident that 
results in the greatest exposure to the public at 
the site boundary. A comparison of the postu- 
lated maximum credible accidents for U. S. 
power reactors indicates that “the credibility of 
an assumed accident is subject to uncertainty in 
that operating experience is insufficient for ac- 
curate analyses, and the probability of a single 
or multiple failure is equally uncertain.”® As a 
result of such uncertainties, a hypothetical in- 
cident is usually considered in instances where 
the maximum credible accident does not release 
large amounts of activity from the reactor. The 
difference between the maximum credible acci- 
dent in one report and the hypothetical accident 
in another is frequently a question of termi- 
nology. In Table V-6, the exposure dose at the 
site boundary is for the maximum credible acci- 
dent, except for those cases in which a hypo- 
thetical accident was also assumed. 


Activity Release from the Reactor 


Many of the factors that influence the amount 
of activity released from a reactor at the time 
of an assumed accident were discussed previ- 
ously. The total amount of activity released 
will depend on the fraction of the fission prod- 
ucts released from the fuel that “melts” and 
the fraction of the total amount of fuel in the 
core that “melts.” In addition to the determina- 
tion of the total amount of activity release, it 
is important to know the amount of activity re- 
lease as a function of time after theincident. In 
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general, there seems to be wide variation inthe 
assumptions as to activity release from the re- 
actor, as the comparisons in Table V-6 indi- 
cate. Much of the uncertainty as to what fraction 
of the fission products escapes at the time of 
the accident stems from the complete lack of 
information on meltdown of the fuel to be used 
in the proposed reactors. 


In addition to the variations in the release 
values, the exposure doses given in the hazards 
reports are not comparable because some de- 
signers assume instantaneous release, whereas 
others consider release of the activity as a 
function of time (in six of the hazards reports, 
release is a function of time). The importance 
of the basis for comparison is emphasized by 
the fact that the assumption that the release is 
a function of time reduces the potential inhala- 
tion exposure by a factor of 1 to 4. 


Furthermore, in computing the dose to the 
bone, it is necessary to estimate the amount of 
Sr®™ released from the reactor. In several of the 
reports, it is indicated that the reactor has op- 
erated for an extended period and that there is 
equilibrium in the core. Although the fission 
products are generally at equilibrium, the Sr” 
will not reach an equilibrium condition during 
the lifetime of the fuel elements. Therefore, for 
the comparison of the exposure doses atthe site 
boundary, it was arbitrarily assumed inthis re- 
view that the reactor had operated for one year 
at full power. 


Method of Activity Removal 


At the time of the maximum credible accident, 
if the fuel fails instantaneously, fission products 
will be transported into the containment vessel 
during the initial depressurization of the pri- 
mary system. On the other hand, if the fuel 
does not fail instantaneously, the fission prod- 
ucts that are released may escape from the core 
by diffusion or they may be carried off in the 
emergency coolant. There are several mecha- 
nisms for removal or reduction of the fission- 
product activity during the time between escape 
from the fuel and the time the fission products 
escape from the containment vessel. The im- 
portance of any of the mechanisms will depend 
upon the design conditions existing for the par- 
ticular facility. As mentioned previously, the 
various mechanisms and the number of hazards 
reports that indicate activity reduction by a par- 
ticular mechanism are given in Table V-7. 


The mechanisms for reducing the activity 
available for leakage from the containment ves- 
sel exist to some degree in all reactor plants, 
Certainly, in all cases, credit can be taken for 
radioactive decay, and, if more information were 
available pertaining to deposition or particle 
size, the mechanisms of settling and deposition 
would be applicable to all reactors. Scrubbing, 
which may result from the action of the steam 
from the primary systems of water-cooled re- 
actors (as well as from the steam systems of 
most reactors), will also be available for all 
reactors, although to different degrees. The 
mechanisms of rainout or filtration require the 
installation of a spray or filter system, re- 
spectively, in order to effect activity reduction. 
Since not all reactor plants are provided with 
these facilities, they cannot be counted on for 
reducing activity in all cases. From the number 
of reports in which credit is taken for the vari- 
ous mechanisms, it is obvious that much addi- 
tional information pertaining to these mecha- 
nisms must be obtained. 


Leakage from Containment Building 


The comparisons of Table V-6 indicate that, 
in all cases except the Hallam Nuclear Power 
Facility and the Humboldt Bay Power Plant, 
pressure-shell containment vessels are pro- 
vided to minimize the escape of fission products 
at the time of the maximum credible accident. 
The leakage rates from the containment vessels 
vary from 0.05 per cent for the Peach Bottom 
plant to 2.2 per cent for the EGCR. These leak- 
age rates are determined primarily by estab- 
lishing an allowable leakage that will keep the 
dose received external to the plant site at or 
below an allowable level. In all cases the leak- 
age rates given are for the maximum allowable 
initial leakage from the containment vessel. The 
actual leakage will be determined by testing 
prior to operation. Additional information per- 
taining to the containment provisions for the 
various reactors is discussed in Section IV, 
pages 55 to 69. 


The containment provisions for the Hallam 
and Humboldt Bay plants are somewhat different 
in that there is containment of the primary 8ys- 
tem in individual cells, as well as containment 
in the building. The high leakage rates from the 
buildings (43 per cent per day for Hallam and 
100 per cent per day for Humboldt Bay) are 
representative of the worst conditions expected. 
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Leakage from the individual cells is at a very 
low rate. © 

In the hazards reports, there tend to be two 
methods of treating leakage from containment 
vessels: (1) the leakage is assumed to be ata 
constant rate for the period of interest, or (2) 
the leakage rate is assumed to decrease with 
time. In ordex to be able to compare the expo- 
sure doses at the site boundaries of the various 
reactors, the leakage rate was considered to re- 
main constant with time. This assumption is not 
intended to imply that it is not proper to assume 
that the leakage rate decreases with time after 
the incident. On the contrary, the reviewer 
feels that it is justifiable to take advantage of a 
decrease in activity release if adequate infor- 
mation is available and that, in many cases, 
there tends to be too great conservatism with 
respect to methods of reducing the predicted 
hazards. 

Two factors are of prime importance in re- 
ducii.g activity release from the containment 
vessel after the initial depressurization of the 
reactor primary system. The decrease in the 


.temperature in the containment vessel following 


the accident will reduce the pressure rapidly. 
This decrease in temperature may be due to 
natural forces or it may be induced by special 
cooling systems, such as a spray system. In 
addition to the decrease in pressure, the re- 
duced temperature will result in condensation 
of various isotopes, such as iodine, which are 
volatile at the temperature existing at the time 
of release from the primary system. Inthe case 
of the BONUS reactor, the potential dose to the 
thyroid is decreased by a factor of 20 by assum- 
ing that the leakage is decreased and that the 
fraction of iodine available for leakage is re- 
duced. In six of the hazards analyses, it has 
been assumed that the leakage decreases with 
time and that the exposure dose at the site 
boundary is thereby reduced by a factor of 1 to 3. 

In discussing the activity leakage from the 
containment building, it is necessary to know 
(1) the isotopic composition of the gas mixture 
that is released from the containment vessel 
and (2) how this composition compares with that 
of the gas mixture inside the containment ves- 
sel. In making hazards analyses, it is common 
practice to assume that the release of a given 
fission product is proportional to the volume 
leakage rate from the containment vessel. This 
assumption implies that the volatile and non- 
Volatile fission products are released at the 


same rate and, furthermore, that all nonvolatile 
fission products are released at the same rate 
regardless of particle size. Inasmuch as the 
leakage rate from a containment vessel is re- 
quired to be small (2.2 per cent per day or less 
in the reactors proposed to date), it is expected 
that this leakage is either through the structural 
material or welds, or, in any event, through 
holes of very small diameter. If the leakage is 
predominantly diffusion through what might be 
considered open porosity in the materials or 
through small cracks, it would be expected that 
there would be preferential diffusion relative to 
the particle sizes of the nonvolatile constituents 
and to the molecular weights of the gases. Be- 
cause of the lack of direct experimental infor- 
mation, the potential activity reduction by pref- 
erential leakage has been considered in only 
one hazards analysis, i.e., in the hazards analy- 
sis of the BONUS reactor it was assumed that 
only xenon, krypton, bromine, and iodine escape 
from the containment vessel. 


Height of Activity Release 


Of all the factors influencing the estimates of 
dose rates or integrated doses at site bounda- 
ries, perhaps one of the most significant is the 
assumption as to the height of the activity re- 
lease. From the equations developed by Sutton®™ 
for expressing the dispersal of activity, the 
total integrated dose (TID) at some distance x 
from the source of release, assuming equi- 
librium atmosphere dispersion of a continuous 
source over a given period of time, may be ex- 
pressed as 


B enh?/Cix?-" 


Dn = Cua 


(5) 


h = height of release, meters 

x = distance downwind of the release, 
meters 

n = stability parameter 

Cy,C, = diffusion coefficients for turbu- 

lence in y and z planes 

B = constant that depends on the leak- 
age rate of the various fission 
products, time, breathing rate, 
etc. 

u = wind speed, meters/sec 


where 


If the release is at ground level, the total in- 
tegrated dose may similarly be expressed as 
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(TID), = OT (6) 


The ratio of the total integrated dose for the 
case of elevated release to that obtained by as- 
suming ground-level release, i.e., 


oHpy = e-h’/Cix-" (7) 
then gives the error factor of the exposure cal- 
culations if, in reality, the activity is released 
at ground level. On the other hand, if the expo- 
sure calculations are based on ground-level re- 
lease and if it can be shown that the activity re- 
lease is at some elevated point, a large safety 
factor is included in the results obtained. 


In examining Eq. 7, it is apparent thatthe im- 
portance of evaluating the height of release in- 
creases as the distance to the site boundary 
decreases. (For the purposes of this discus- 
sion, the distance to the site boundary appears 
as x in Eq. 7.) In seven of the hazards reports 
for the reactors described in Table V-6, ele- 
vated release is assumed. At Indian Point and 
Humboldt Bay, activity discharge would occur 
from a stack, and thus the elevated-release as- 
sumption is certainly justified. In the other five 
analyses, elevated activity release or uniform 
release from the containment vessel, as at 
Piqua, were assumed. The assumption of ele- 
vated release introduces a reduction in the dose 
at the boundary which ranges from a factor of 
3 for the Big Rock Point plant to a factor of 


~15 for the Piqua reactor. It is apparent that 
the factors of reduction resulting from assuming 
elevated release may be so large that itis most 
important to evaluate this mechanism correctly. 
For those cases in which elevated release is 
assumed, it would be expected that, in addition 
to the normal testing of total leakage from the 
containment vessel, additional tests should be 
performed to prove that the leakage is not at 
ground level since any leakage at ground level 
is so much more significant than is elevated 
release in contributing to the dose rates at the 
boundary. In order to take credit for no leakage 
at ground level, it would appear that the designer 
should either provide special methods for pre- 
venting ground-level release (i.e., a barrier 
outside the first containment vessel, as in the 
case of the CETR) or be able to test the final 
containment structure for leakage at ground 


level and meet some specified leakage rate for 
distances from ground level to some height 
above ground level, ho. 


If the release from the containment vessel is 
assumed to be uniform with respect to its 
height, it may be shown that the dose rate, 
compared with that for ground-level release, is 


1 


oh (1CyCz x? -ny'% 


Dx 
Dy 
If the release is not uniform, the important fac- 


tor to consider is the percentage of the leakage 
that occurs below ho, where 


ho = 1.5 (CyC,.x2-n) 


One final factor that must be considered when 
elevated release is assumed is the importance 
of the mixing of the atmosphere and the released 
activity as a result of air turbulence adjacent to 
the containment vessel. The turbulence may 
cause complete mixing, and the concentrationof 
activity adjacent to the vessel may be expressed 
as 


z|© 


whére x= concentration of activity, curies/m! 
Q = source, curies/sec 
A = cross-sectional area, m 
u = wind velocity, meters/sec 


2 


However, before such mixing is assumed, it 
should be verified experimentally and compared 
with the effect of the mixing at small distances 
from the containment vessel. This may be done 
by computing the concentration from the expres- 
sion 


2Q 





X 


where 





(24 1/(2-n) 
“— eo) 


In the case of the Piqua reactor, where an 
elevated source was assumed, the above method 
was used, 
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Factors Reducing Activity 
During the Dispersal Period 


During the time between the release of ac- 
tivity from the containment vessel and the time 
the activity reaches the site boundary, the initial 
amount of radioactivity at the time of releaseis 
reduced by radioactive decay and fallout. The 
importance of natural radioactive decay in- 
creases as the distance to the site boundary in- 
creases and the wind speed decreases, but, in 
general, it is an insignificant factor, except for 
extremely short-lived fission products. Cham- 
berlain® has shown that the equations of Sutton 
may be modified by a factor to account for the 
removal of part of the activity by fallout. This 
factor may be expressed as 


xn/2 


If = exp (see) 


nut 2C z 


where v, is the velocity of deposition and the 
other terms are as previously defined. For 
cases in which the settling velocity is much 
smaller than the horizontal wind speed, the 
settling velocity may be used for the velocity of 
deposition. In using this factor, the settling ve- 
locity will depend upon such factors as the ele- 
ment of interest, the particle size, electrostatic 
forces, impaction effects, thermal effects, and 
surface adsorption. Therefore, values © Ug 
should be obtained experimentally for conditions 
which stimulate the conditions typical of the 
maximum credible accident. This factor is only 
applicable for the case of a release at ground 
level, In the various hazards reports the com- 
puted exposure doses at the site boundaries do 
not, in most cases, take into account depletion 
of the released activity by fallout. The computa- 
tion of thyroid exposure dose at the Piqua site 
boundary was based on activity depletion by fall- 
out, and a factor of reduction of ~6.5 in the 
thyroid exposure dose resulted. 


Meteorological Conditions at Site 


The meteorological conditions at the site will 
have a large influence on the dispersal of the 
activity released from the containment vessel 
at the time of the maximum credible accident, 
and therefore, in order to compute the expo- 
sure dose at the site boundary and to make al- 
lowance for fallout, it is necessary to evaluate 
the diffusion coefficients Cy and C;, the stability 


parameter n, and the wind speed uw. Compari- 
sons of the various hazards reports show that 
estimates of C, n, and u vary significantly from 
one site to another. Although some variation 
might be expected, in many cases the prelimi- 
nary nature of the hazards reports suggests 
great uncertainty as to the accuracy of the values 
used for C, n, and u. Inasmuch as power reac- 
tors are normally constructed at remote loca- 
tions and the meteorological conditions must be 
inferred from data taken at the nearest weather 
station, it would be surprising if the assumed 
meteorological conditions did represent the ac- 
tual conditions at the site. It is therefore of in- 
terest to investigate the effect of changes in the 
meteorological conditions on the exposure dose 
at the boundary. The limits of the diffusion pa- 
rameters used in the various hazards analyses 
are compared in Table V-8 with values estab- 
lished in USAEC Report WASH-740 (reference 
66). 


Table V-8 LIMITS OF DIFFUSION PARAMETERS 
FOR INVERSION CONDITIONS 





Values listed in 
hazards reports 


Values listed in 
Report WASH-740 








Param- 
eter Maximum Minimum Maximum Minimum 
n 0.55 0.25 0.75 0.4 
u 3 0.86 6 1 
Sy 0.4 0.1 0.5 0,08 
C3 0.2 0.02 0.07 0.02 
c 0.01 0.002 
CyC,z 0.08 0,002 0.035 0.0016 
(oy 0.04 0.0004 0.0049 0.0004 





As shown in Table V-6, several of the hazards 
reports do not distinguish between Cy and C;. 
For those cases in which ground-level release 
is assumed, it is implied that C? = C,C,; how- 
ever, for those cases in which elevated release 
is assumed, if C? = C,C,, it would be inappro- 
priate to use the value of C? rather than C2. It 
must therefore be concluded that either Cy, =C, 
or that there is an inconsistency in the applica- 
tion of the diffusion coefficients in those reports 
which donot differentiate between C, and C,. In 
Table V-8, values of -C’, CyCz, andC} are tabu- 
lated to indicate the variation in these three 
parameters. 

The values in Table V-8 indicate the following 
effects on the dispersion calculations of the 
differences between the maximum and minimum 
values of u, C, and n: 
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Ratio of maximum 


Param- value to minimum 
eter Range value 
n 0.25—0.75 3 
u 0.86-—6 6.98 
Cy 0.08—0.5 6.25 
Ci 0.02—0.2 10 


The distances to the site boundaries of the re- 
actors listed in Table V-6 vary from 150 to 900 
meters. Therefore the ratio of the maximum to 
minimum exposures, based on the diffusion 
parameter ranges for the “worst” inversion as- 
sociated with the maximum credible accident, 
varies between 5.35 x 10° and 1.31 x 10‘ for the 
150 to 900 meters, respectively. It should im- 
mediately be pointed out that such large varia- 
tions are not real, because it is not usually pos- 
sible to apply the minimum or maximum values 
to all the parameters, u,C,, Cz, and, at the 
same time. The uncertainty which results, how- 
ever, from reasonable variations in any combi- 
nation of u, Cy, C,, and or a large variation in 
a single parameter is quite significant. For ex- 
ample, the product C,yCzu varies by a factor of 
about 30 for the reactors listed in Table V-6. 
Therefore, it can be concluded that until mete- 
orological tests are performed at a reactor site, 
some uncertainty undoubtedly exists as to the 
amount of dilution of the activity released from 
the reactor during transit to the boundary. 

In addition to the uncertainty in the accuracy 
of the diffusion parameters, there is the problem 
of estimating the exposure at the boundary for 
those short periods of time when the wind speed 
is essentially zero, i.e., a period of calm. Dur- 
ing a period of calm, Sutton’s equation does not 
apply. If a period of calm is represented by the 
complete lack of wind velocity, the concentration 
of activity adjacent to the reactor containment 
vessel will depend only on the molecular diffu- 
sivity of the activity, and the concentration of 
activity at distances greater than 100 ft and for 
times less thanone day isnegligible. It is clear 
therefore that the problem associated with the 
calm is not that created by a wind speed of zero, 
but, rather, that which would exist if the wind 
speed were greater than zero but less than 1 
meter/sec during the period of interest (short 
times after the accident). It appears that data 
which give the wind velocity as a function of 
direction and time, with special emphasis on 
wind velocities of less than 1 meter/sec, should 


be obtained at the reactor site. The factor of 
wind variability has not, in general, been con- 
sidered in the hazards reports. In the case of 
the Elk River Reactor, however, the calculated 
dose at the boundary was decreased by a factor 
of approximately 4 because of wind variability. 


Site Boundary 


Following the maximum credible accident, the 
exposure dose to the public will depend, of 
course, on the distance from the source of ac- 
tivity release to the surrounding uncontrolled 
public land. In many of the hazards reports, 
calculated dose rates or integrated exposure 
doses are given for various locations downwind 
of the activity release but not at the plant bound- 
ary. The various assumptions made for the 
hazards analyses raise questions as to what 
constitutes the site boundary and to what degree 
the operator of a reactor must exercise control 
over an area in order toconsider itan exclusion 
area. In particular, what consideration must 
the operator give to penetrations of the exclu- 
sion area, such as highways, railroads, rivers, 
and lakes? In cases where highways or rail- 
roads are in close proximity to the reactor, it 
is conceded that proper control canbe exercised 
at the time of the maximum credible accident 
to prevent the overexposure of individuals. How- 
ever, the control procedures to be put into op- 
eration at the time of the maximum credible 
accident should be an integral part of the emer- 
gency operating procedures. 


It is not quite so clear how the reactor op- 
erator can exercise control over rivers or 
lakes. Inasmuch as all power reactors depend 
upon a large heat sink, it is to be expected that 
the reactors presently being designed and the 
reactors of the future will be located on some 
large body of water. It is also probable that, in 
most cases, the distance from this body of water 
to the reactor will be small compared with the 
distance to the site boundary on land. Itis com- 
mon in the hazards reports to investigate only 
the exposure at the site boundary where the 
boundary is considered to be the minimum dis- 
tance on land to where the plant property ends. 
Since the distance to the body of water in some 
cases may be less than 150 ft, the potential di- 
rect radiation and inhalation doses would be con- 
siderably higher at the adjacent body of water 
than at the locations considered, It would, of 
course, be possible to evacuate a person from 4 
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lake or river adjacent to the plant site, but the 
dose rate during the initial period of exposure 
might be higher than that calculated for the site 
boundary. It would therefore seem to be neces- 
sary to analyze the exposure doses at locations 
near the reactor and to investigate both the time 
required to evacuate such locations and the de- 
gree to which these locations can be classified 
as restricted zones. In the case of a lake or a 
river, it might be possible to restrict the area 
adjacent to the plant. The real problem is not 
so much the exposure of traffic that would be in 
the critical zone for periods of less than 15 to 
30 min but the exposure to individuals who use 
public bodies of water for fishing, pleasure boat- 
ing, or Swimming. 


In the determination of the distance tothe site 
boundary, attention should be given to surround- 
ing “uninhabited areas.” An adjacent area that 
is uninhabited at the time a reactor is built may 
not remain uninhabited if it is not within the 
control of the plant operator. It would therefore 
seem unjustified to consider the location of the 
maximum potential public exposure at any point 
beyond the actual plant boundary. 


Exposure Time 


In the determination of the potential exposure 
dose at a site boundary, it is necessary to as- 
sume some period of exposure. Two periods are 


of greatest interest: (1) a relatively short time 
that might be considered as an evacuation period 
and (2) a long time that would apply in cases 
where individuals would not be required to 
evacuate the area. In the selection of the expo- 
sure time, both the time an individual is exposed 
to irradiation and the time dependence of the 
activity release from the containment vessel 
are important. As an example, for the Big Rock 
Point plant, it is assumed that no fission prod- 
ucts are released for 15 min after the maximum 
credible accident; the exposure dose is therefore 
small initially and does not reach a maximum 
until several hours after the initiation of the 
maximum credible accident. On the other hand, 
for the EGCR, the activity release has been as- 
sumed to be instantaneous, but the cleanup sys- 
tem provided inside the containment vessel is 
expected to reduce the activity available for re- 
lease to negligible quantities in about 2 hr. 
Therefore, for the EGCR, the exposure dose re- 
teived in the first 2 hr represents approxi- 
mately the same as that which would be received 


over a long period of time. In order to provide 
a basis for comparison of the various reactors, 
an 8-hr exposure was arbitrarily assumed for 
the calculations of Table V-6. 


Conclusions 


The determination of the potential exposure 
dose at a reactor site boundary depends upon 
the assumptions made regarding the numerous 
factors discussed previously. In general, the 
hazards of a particular reactor have been judged 
by computing the dose rate, integrated dose, or 
concentration of activity at some location (not 
necessarily the site boundary). Since there are 
no official criteria with which to evaluate the 
hazard potential for reactor accidents, it is not 
surprising that the comparable 8-hr exposure 
values given in Table V-6 vary over a wide 
range. In addition to the large uncertainty as- 
sociated with the assumptions and the large 
variation in the dose values, there is one other 
factor that casts doubt on the results presented 
in the hazards reports when the results are used 
to compare the relative safety of a particular 
reactor, Although the analyses define the expo- 
sure doses at certain locations and provide lim- 
ited information on population densities, little 
information is generally provided concerning 
the integrated exposure doses to the general 
public. It would seem appropriate to include in 
the hazards reports calculations of the potential 
exposure doses to the public for the entire area 
that would be affected by anaccident. Inorder to 
obtain an index of the relative hazard, it is im- 
portant to know the maximum exposure dose 
rate for the public and the integrated exposure 
dose over a given area expressed in man-rem. 


From a consideration of the various exposure 
calculations, it is apparent that criteria are 
needed relative to the conditions under which 
any single mechanism or combination of mecha- 
nisms may be employed in reducing the expo- 
sure dose at the site boundary. Several mecha- 
nisms involve only natural phenomena, such as 
radioactivity decay and fallout deposition, which 
may or may not be quantitatively defined. It may 
be presumed that a reduction mechanism canbe 
used in an exposure calculation only if experi- 
mental data supporting its use for the case in 
question are available. Other reduction mecha- 
nisms involve physical processes such as spray 
cooling to minimize fuel-element melting or 
recirculation and filtration to reduce the activity 
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concentration in the gas leaking out of the con- 
tainment vessel. In such instances the perform- 
ance of these processes must be known under 
service (accident) conditions, and, before credit 
for these processes can be taken, it must be 
shown that they will operate in the event of any 
accident that might create the situation which 
the process in question was designed to amelio- 


rate. (H. N. Culver) 
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Vi CURRENT EVENTS 





Holes in HRE-2 Core Tank 


During two years of operation, between January 
1958 and February 1960, there were several 
instances of overheating and severe local cor- 
rosion, melting, or burning of materials in the 
core of HRE-2, the second homogeneous reac- 
tor experimental assembly at the Oak Ridge 
National Laboratory. Two holes developed inthe 
Zircaloy-2 core tank, the latest in January 1960. 
The perforated-plate flow diffusers were dras- 
tically attacked, as were corrosion specimens 
and a titanium holder, which were in the core 
during one run. These incidents occurred while 
the reactor was being operated with some ura- 
nium separated from the circulating fuel solu- 
tion and with at least a part of the separated 
material in the core. Overheating from fission- 
ing in deposits on the metal surfaces caused the 
drastic corrosion and burnout. There is evi- 
dence that such difficulties can be overcome by 
changes in the hydrodynamic design of the core 
and adjustment of the composition of the fuel. 
From the safety standpoint, experience with the 
HRE-2 assembly has (1) emphasized the im- 
portance of the relation between core design and 
properties of the fuel in fluid-fuel reactors, 
(2) confirmed that Zircaloy-water and titanium- 
water reactions involving massive pieces of 
metal are not normally self-sustaining, (3) pro- 
vided further demonstration of the effectiveness 
of the negative temperature coefficient in con- 
trolling nuclear excursions in aqueous homoge- 
heous reactors, and (4) emphasized the impor- 
tance of knowledge of the distribution of 
fissionable material and careful control of in- 
ventory in fluid-fuel reactors. 

The HRE-2 is a two-region circulating-fuel 
teactor designed to operate at 5 Mw(t) at tem- 
peratures up to 300°C and pressures up to 2000 
psia. The reactor vessel assembly, including 


corrosion specimens in the core, is shown 
schematically in Fig. 6. A heavy-water solution 
of uranyl sulfate is recirculated upward through 
the core at a rate of about 450 gal/min. The de- 
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Figure 6—Diagram of HRE-2 reactor vessel. 


sign fuel solution composition is 0.04M UO,SQ,, 
0.02M CuSQ,, and 0.025M H,SO,. Copper cata- 
lyzes the recombination of radiolytic gas, and 
excess acid increages the stability of the fuel 
against separation of uranium by hydrolytic 
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processes. Initially the blanket contained only 
heavy water, which was recirculated at a rate 
of about 250 gal/min. The first hole’ permitted 
communication between core and blanket, and 
the reactor has therefore been operated most of 
the time with uranium in both the core and 
blanket regions. 

The formation of the first hole in the HRE-2 
core occurred during run 14 on Apr. 4, 1958, 
about 30 min after the power had been raised to 
the nominal design level for thefirst time.’ The 
actual heat-balance power level was 6.4 Mw. 
’ The reactor had been operated for a total of 989 
hr, 257 hr critical, and approximately 400 
Mw-hr since the first critical experiment. The 
initial indication of the incident was a decrease 
in the fuel level in the fuel circulating-system 
pressurizer. This was followed by changes in 
letdown-valve position, storage-tank weight, and 
other indications that there was transfer of fluid 
from the core to the blanket system. Analyses 
of samples of blanket fluid confirmed the trans- 
fer. The only obvious change in the nuclear be- 
havior of the reactor was a gradual increase in 
the amount of power generated in the blanket, 
and therefore the power level was lowered by the 
operator. The reactor was subsequently shut 
down in the normal manner by gradually diluting 
the fuel and cooling the system. Evidence that 
the hole was in the core tank at the junction be- 
tween the 30 and 90° conical sections (Fig. 6) 
was obtained within several days, but it was in 
a region where it could not be viewed with the 
simple periscopes available at the time. It was 
suspected that the weld at the junction between 
conical sections had cracked. 

Before run 15, procedures were developed for 
operating the reactor with the concentration of 
uranium in the blanket only about one-third of 
that in the core,’ making it possible to generate 
between 50 and 60 per cent of the heat in the 
core. In run 16 the power level was raised 
gradually to the 5-Mw level,‘ and operation was 
continued at this power for several days before 
the reactor was shut down for inspection and 
installation of corrosion specimens in the core. 
Brief surges or “pips” in power were observed 
during run 16, and there was one pip in which 
the power increased from 3.8 to 5.6 Mw. The 
disturbances caused no significant upset in the 
reactor temperature or pressure. Although tests 
were run in an attempt to characterize the dis- 
turbances, no conclusions were reached as to 
their cause. The total operating time at the end 


of run 16 was 2049 hr, 941 hr critical, and 2055 
Mw-hr. 

Following further unsuccessful attempts to 
view the hole, corrosion specimens were in- 
stalled in the core, and run 17 was made.° Much 
of the power operation was ata level of approxi- 
mately 3.5 Mw. Power pips occurred much 
more frequently than in run 16, and in one pip 
the power increased rapidly from 3.5 to 25 Mw 
as a result of the introduction of an approxi- 
mately 2.1 per cent change in reactivity in 10 
sec. The resulting pressure surge was about 
200 psi. A pressure rise of 1000 psi, which 
would accompany the introduction of a 10 per 
cent change in reactivity in about 3 sec, is the 
maximum considered to be permissible during 
experiments with the reactor,® and a pressure 
rise of 3900 psi is considered to be dangerous.’ 

Two of three thermocouples installed in the 
corrosion specimen holder, one near the bottom 
and the other near the center, indicated rapid 
changes from the normal temperature to atem- 
perature in excess of 1000°C at times notasso- 
ciated with power pips, and then they failed. 
Tests made at the time suggested that the ab- 
normal behavior was due to sheath failure. The 
third thermocouple, which was near the core 
outlet, indicated normal temperatures through- 
out the run. 

Correlation of analyses of samples of fuel 
solution showed that uranium separated from 
the fuel solution as the power increased and that 
the amount separated was approximately pro- 
portional to the power level, at least inthe range 
of 1 to 3 Mw. The maximum power-dependent 
loss of uranium was about 1.5 kg. Comparison 
of the inventory based on analysis of the fuel 
and the inventory based on a relation between 
fuel concentration and critical temperature 
indicated that at least a part of the separated 
uranium was in the core and was effective in 
promoting the nuclear reaction. Run 17 was 
terminated after about six weeks for inspection 
of the core. The total operating time had been 
increased to 3134 hr, 1874 hr critical, and 4481 
Mw-hr. 

During the inspection it was found that the 
specimens in the core had come loose from the 
holder and had fallen ontothe screens. The ends 
of the specimens were at least partially de- 
stroyed. Attachments to the holder were de- 
stroyed, and there were two holes in the webbing 
of the titanium holder. The two thermocouples 
that failed had disappeared up to the level of the 
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third thermocouple. The third thermocouple was 
intact, and specimens in the outlet pipe were 
intact. Many ligaments were missing from the 
diffuser plates, and it was discovered later that 
four of the top five screens had become detached 
from the wall. 

The hole was seen for the first time from 
outside the core by means of a special arrange- 
ment of periscope and mirrors and, frominside 
the core, after a 2-in.-diameter hole was cut 
through the diffuser plates.’ The hole is ap- 
proximately 1 in. in diameter and gives the im- 
pression of having been formed by melting of 
the Zircaloy wall, which was *4 in. thick at that 
point. Metallographic examinations of parts of 
the specimens and specimen holder®: and of a 
small region of a section removed from the 
upper screen indicated that the metal in areas 
of severe damage had been heated toavery high 
temperature, presumably to the melting point. 
The heat-affected zones were so small and the 
metallographic structures were of suchanature 
that the heating and cooling must have occurred 
in very short times. Presumably the reactions 
ceased when the driving heat sources were re- 
moved as the metal disintegrated. 

The remainder of the reactor operation, runs 
18 through 21, was concerned with the investiga- 
tion of effects of variables on the power level at 
which an instability is first detectable.*:!°-'3 
Otherwise unexplained increases or decreases 
in the reactor average temperature and the ap- 
pearance of power pips were taken as indica- 
tions of instability. These were ordinarily con- 
firmed by analyses of fuel samples. The power 
level for inception of instability was found to 
increase with decreasing pressure and with in- 
creasing acidity of the fuel. The reactor op- 
erated in a stable manner at 5 Mw and 260°C if 
the pressure was kept below 1250 psia. 

During the experiments the reactor was op- 
erated continuously at various power levels for 
periods of 2 to 3, months. The accumulated 
Operating time was increased to 9179 hr, 6470 
hr critical, and 12,187 Mw-hr before a second 
hole formed in the core tank'® while borderline 
stability conditions were being investigated prior 
to raising the power to above 5 Mw. The second 
hole, measuring 1°% in. long and % in. across, 
and the end of a probing tool are shown in Fig. 7. 
Until the brittle edges were chipped away by the 
Probing tool, the hole was smaller and irregular. 
This observation led to the possible, but less 
likely, conclusion that the second hole was 





Figure 7—Second hole in HRE-2 core tank. 


caused by corrosion rather than by burnout. The 
only indication of the incident was a gradual de- 
crease in the average nuclear temperature and 
an increase in the fraction of power produced in 
the blanket as the mixing increased. The in- 
creased mixing made it necessary to operate 
with about equal concentrations of fuel in core 
and blanket, with most of the power produced in 
the blanket; therefore the experiments were 
terminated. 

Results of the HRE-2 experience have led 
to the conclusion that difficulties were en- 
countered because of a combination of factors 
related to the chemical stability of the fuel and 
the hydrodynamic design of the core. Uranium 
can separate from uranyl sulfate fuel solutions 
in several known ways. Solubility of the fuel 
constituents decreases with increasing tempera- 
ture, and UO; : D,O, UO, - UO,SOQ,, and CuO. 3U0, 
can precipitate, or a heavy liquid phase that is 
rich in uranyl sulfate and copper sulfate can 
separate from solution if the temperature gets 
sufficiently above the design operating tempera- 
ture. Uranium is sorbed by corrosion-product 
oxides of zirconium and iron, and there is some 
indication that the temperature coefficient of 
sorption is positive. Fuel constituents can be 
concentrated by boiling on the metal surfaces. 
Normally the concentration factor would be 
small, but severalfold increases in concentra- 
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tion might be obtained under unfavorable geo- 
metric and low flow conditions. Such concen- 
trated fuel is much more corrosive to Zircaloy-2 
than the normal fuel, and the corrosion products 
have been found to contain 10 to 40 per cent 
bound uranium in some experiments. The two- 
liquid-phase temperature of the fuel solution 
decreases with increasing concentration, passes 
through a minimum, and then rises again. This 
minimum two-liquid-phase temperature was be- 
low the boiling temperature of the fuel at the 
operating pressure during much of the operation. 

The flow in the HRE-2 is sufficiently low that 
fuel in contact with some surfaces inaclean re- 
actor might reach the boiling point. This condi- 
tion is greatly aggravated when corrosion- 
product solids are present. Upward flow with 
low velocity tends to cause solids to accumulate 
on surfaces below the equator of the core, and 
thus to further retard the flow, increase the 
heating, and promote conditions that lead to fuel 
instability. Deposits that contain 40 mg of ura- 
nium per square centimeter should produce heat 
at burnout rates.’ The fact that the flow condi- 
tions were unfavorable in the presence of solids 
was demonstrated in mockup tests" and was at 
least partially confirmed by examination of the 
reactor core. 

Damage is confined to the lower half of the 
core tank; there is no evidence of similar dam- 
age to the upper hemisphere. New core tank de- 
signs that provide for high-velocity circulation 
of cool fuel over the metal surfaces and rapid 
removal of solids are being developed." The 
effectiveness of much more modest changes in 
hydrodynamics, which can be obtained by re- 
moving the diffuser plates and reversing the 
flow in the present core tank, was inferredfrom 
model tests.'® These changes are being made, 
and the holes are being patched sothat the rela- 
tion between solution stability and hydrody- 
namics can be investigated in the HRE-2. 

Zirconium-water reactions are of consider- 
able concern to the designers of water-cooled 
reactors with zirconium alloy parts. In the 
HRE-2, metal that was heated to the melting 
point by uranium accumulations was completely 
oxidized or dispersed, but the reaction did not 
propagate to adjacent metal. Removal of the 
diffuser plates involved cutting them into strips 
with a torch under water. Many small droplets 
of molten Zircaloy were formed during testing 
of the method and during the cutting inthe core, 
but there was no evidence ofa significant metal- 


water reaction. This experience seems to con- 
firm other findings that zirconium pieces ignited 
in oxygen are normally quenched by water.'®!1 


Damage to materials in the HRE-2 core is of 
considerably less importance than the demon- 
stration that there are ways in which uranium 
can separate from the fuel and deposit in the 
reactor system. The large negative temperature 
coefficient was shown to be effective in limiting 
the effects of shifting of this material inthe re- 
actor to pressure surges which were of little 
consequence. The amount of reactivity that can 
be controlled by the negative temperature coef- 
ficient is limited, however; and the ratio ofura- 
nium in the circulating system to uranium inthe 
core of a large circulating-fuel power breeder 
reactor can be between 2 and 4. A major con- 
sideration, therefore, in the design of a large 
plant will be control of the inventory so that 
separation of fissionable material under ab- 
normal conditions can be recognized and reme- 
dial measures can be taken before the amount 
of reactivity associated with the separated ura- 
nium is greater than that which can be con- 
trolled easily by the negative temperature coef- 
ficient. (R. B. Briggs) 


Shippingport Operating Experience 


The Shippingport Atomic Power Plant, better 
known as the PWR, is a pressurized-water re- 
actor system designed to operate at a thermal 
power level of 230 Mw. The reactor achieved 
initial criticality on Dec. 2, 1957, and first 
reached full power, i.e., 60 Mw net electrical 
output, on Dec. 23, 1957. The plant then oper- 
ated more or less continuously for almost two 
years with the initial fuel loading, Core 1, 
Seed 1. The end of full-power operation with 
Seed 1 was reached at 5532.8 EFPH (equivalent 
full-power hours) on Sept. 6, 1959, at whichtime 
all 32 control rods were fully withdrawn. The 
plant was later operated for a short time at re- 
duced temperature and power, bringing the total 
to 5806.1 EFPH, and was then shut down for re- 
fueling on Oct. 7, 1959. Following a period of 
testing, refueling, and minor modification, plant 
operation was resumed with Core 1, Seed 2, 
criticality being attained on Apr. 12, 1960. 

Inasmuch as the PWR was the first large- 
scale nuclear power plant to be operated in the 
United States, it represents an unparalleled 
source of operating experience, much of which 
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bears directly or indirectly on nuclear 
safety.\°-** Fortunately, the operating program 
has included extensive testing, anda determined 
effort has been made to document and make 
available the information and experience ac- 
quired. An excellent summary of the first year 
of operation was issued," and the more recent 
experience is described in monthly progress 
reports of the Duquesne Light Company, !9-* 
Bettis technical progress reports,”5~®* and re- 
ports of individual tests by the Duquesne Light 
Company (references 30, 31, and 33 to 36). 
These reports, in general, contain useful tech- 
nical detail, although the scattering of the data 
inherent in this type of reporting is likely to 
discourage the casual investigator. Further 
summaries similar to reference 18 would be 
valuable and are presumably forthcoming. 


Fission-Product Activity in Coolant 


One area of continual interest is the level of 
fission-product activity in the primary coolant, 
since this is a measure of the integrity of the 
blanket elements, the first large-scale applica- 
tion of Zircaloy-clad UO,-pellet fuel rods. In 
the PWR a fuel-element failure can be detected 
by (1) the Failed Element Detection and Loca- 
tion (FEDAL) system*"?8 and (2) radiochemical 
determination of the steady-state and transient 
distribution of fission-product activity in the 
coolant. 


Radiochemical analyses during the early op- 
erating period indicated the presence of fission 
products in the coolant. Steady-state activity 
levels were established first during the period 
from April 28 to May 3, 1958, and again during 
the first 1000-hr full-power run from July 1 to 
Aug. 14, 1958. The levels had not changed sig- 
nificantly between the two periods. Subsequently, 
however, the activity levels gradually increased 
until April 1959, and then they remained sub- 
stantially constant for the duration of Seed 1 
life. Typical values are listed in Table VI-1. 


Data available after one year of operation 
were evaluated" in an attempt to establish the 
source of fission products entering the coolant. 
The two most probable sources were uranium 
contamination of the surface of the Zircaloy and 
defective UO, blanket elements, since the ob- 
Served activities were too high to be accounted 
for on the basis of the expected uranium content 
(.85 ppm) in bulk Zircaloy. No direct evidence 
of surface contamination was found, although the 


Table VI-l1 AVERAGE STEADY-STATE 
FISSION-PRODUCT ACTIVITIES IN PWR COOLANT 





Average specific activity, dis/(min)(ml) 








April July April August 
Isotope 1958* 1958* 1959+ 1959} 

Cs'38 6,300 "5,390 22,000 23,000 
Kr® 11,200 9,780 12,000 14,000 
Br® 167 168 950 1,000 
Br® 630 462 1,700 1,900 
ys 140 162 710 540 
738 380 1,680 6,700 6,800 





*See reference 18. 
{See reference 20. 
{See reference 22. 


apparently high delayed-neutron activity indi- 
cated by the FEDAL system was not inconsistent 
with this possibility. The most conclusive evi- 
dence of defective UO, elements was the peaking 
of 13! and I’ specific activities following 
startup (waterlogging effect). Also, the time 
required for ionic species to reach steady state 
in the coolant was different from that expected 
from a recoil source. It was concluded that the 
blanket contained one or more defective UO, 


rods, but it was not possible to determine the 
number of defective elements or whether signifi- 
cant levels of surface contamination were pres- 
ent. 


The FEDAL monitor showed apparent peaking 
of delayed neutrons in the effluent from a blanket 
assembly (designated as assembly F2) following 
a reactor startup on Sept. 22, 1958, a charac- 
teristic indication of defective UO, rods.*” In 
an attempt to determine whether failed blanket 
elements existed in other regions of the core, 
the FEDAL system was used to check nine other 
sampling positions that were most suspect.*! 
No signs of bursts or peaks upon power increase 
during startup runs were observed which would 
indicate that elements had failed. The suspected 
blanket assembly and fuel bundles from two 
other blanket assemblies were replaced during 
the refueling and were then examined.’ Results 
of the examination are not yet available. 


In general, fission-product release experi- 
ence at Shippingport indicates that both the seed 
and blanket elements have a high degree of in- 
tegrity. The activity levels in the primary 
coolant are not yet approaching those for which 
the plant is designed.*? It appears to the re- 
viewers, however, that the value of the FEDAL 











104 NUCLEAR SAFETY 


system has not yet been demonstrated. This 
system has required considerable attention and 
maintenance (references 19, 22, 25, 27, and30), 
and the data collected have been largely incon- 
clusive, with the exception of a strong indication 
that some defective UO, rods are present in 
blanket assembly F2. Unless the presence of 
defects is confirmed during the current exami- 
nation of this assembly, the value of the FEDAL 
system will be in doubt. 


Radiation Levels 


Measurements of dose rates within the reac- 
tor plant container at full power have indicated 
that the intensities are much lower than were 
anticipated before plant operation. Selected val- 
ues from a survey made after 1700 EFPH" are 
as follows: 


Radiation levels at 
full power, mr/hr 





Location General Maximum 
Boiler chambers 100—700 14,000 
Auxiliary chamber 0.02—2 400 
Valve access cubicles 0.05—5 15 
Isolated loop (48 hr 

after isolation) 0.1-4 20 


It was possible for men to work in the aux- 
iliary chamber andthe purification-valve access 
cubicles during operation without limitation. 
Surveys (references 20 to 23, 33, and 34) have 
shown no significant increases inthe dose levels 
during operation, except for a few points at- 
tributed to deposited corrosion-product activity 
(crud). 

Radiation levels after reactor shutdown have 
not been a serious problem, but local levels 
from deposited crud increased sufficiently dur- 
ing the life of Seed 1 to be troublesome during 
refueling. Crud concentrations in the primary 
coolant remained essentially constant at about 
3 ppb,'%.25-28 with occasional increases to as 
much as 60 ppb. The specific activity of the 
crud, after a 120-hr decay period, had gradually 
increased, however, to about 6 x 10° counts/ 
(min)(mg) after 1700 EFPH" and to about 1.2 x 
10’ counts/(min)(mg) after about 5600 EFPH.”® 
Later crud samples showed a higher percentage 
of long-lived activity, with Co™ predominating. 


The maximum radiation intensity measured 
15 hr after shutdown in the boiler chambers and 


in the auxiliary chamber was of the order of 10 
mr/hr after 1700 EFPH.” At the end of Seed 1 
life, a purification line in the access chamber 
showed 500 mr/hr, and a FEDAL pump base in 
the auxiliary chamber showed 180 mr/hr.”? In 
a spot check of the reactor chamber 1 hr after 
shutdown at 1700 EFPH, the maximum intensity 
found was 150 mr/hr at the reactor head near a 
control-rod drive mechanism." Later surveys 
of the same region revealed points at which the 
level was 1 r/hr after 4180 EFPH”°and 1.3 r/hr 
after about 5600 EFPH.” 


During refueling, radiation levels on the re- 
actor head were as high as 1 r/hr just above 
the open mechanism ports and 25 to 75 mr/hr 
at the outside edge of the reactor head. An im- 
peller removed from the 1D coolant pump 
showed 450 mr/hr at a distance of 2 in., and 1 
r/hr was measured inside a handhole on the 1B 
heat exchanger. General levels, however, were 
less than 30 mr/hr. 


The significance of the increasing shutdown 
dose levels is difficult to evaluate because the 
mechanisms of activity transport are not suffi- 
ciently well understood to permit extrapolation 
of existing data. Because the PWR core contains 
large quantities of Inconel and stainless steelat 
the edges, and there are relatively low coolant 
velocities through parts of the core, it was ex- 
pected that the possibility of the development of 
sources of solid corrosion-product activity was 
potentially greater than in earlier pressurized- 
water reactor plants. Efforts to minimize these 
sources included (1) elimination of regions of 
low flow velocity wherever possible in the de- 
sign and (2) operation of the primary coolant at 
pH 9.5 to 10.5, with LiOH as the additive.” Ap- 
parently, however, no attempt was made to re- 
duce the normal cobalt content of core mate- 
rials, as has recently been done in reactors with 
stainless-steel cores. Although the shutdown 
dose levels have not seriously impeded mainte- 
nance or the refueling operation, their trouble- 
some nature is indicated by the experience 
during the first two weeks of the refueling op- 
eration, when 20 of the 60 maintenance men re- 
ceived permissible doses of 300 mr/week, oe 
it was necessary to restrict their activities.” 
The concern of the present reactor staff for the 
potential seriousness of problems of this nature 
is perhaps indicated by the considerable atten- 
tion being given to the development of decon- 
tamination procedures.2>~? 
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Components 


Many components in the PWR represent sig- 
nificant extrapolations in size from previously 
available equipment. Although extensive testing 
was carried out during development and after 
installation, a number of failures have occurred. 
It appears that these failures have not appreci- 
ably affected the safety or operability of the 
plant, but they perhaps give some insight into 
what to expect from well-developed components 
in an initial application. 


Three main coolant pumps have failed. The 
incidents were spaced at intervals of several 
months, and, probably by coincidence, all three 
failures occurred in the same coolant loop. The 
first failure occurred on June 25, 1958, during 
a plant warmup with the pump operating at full 
speed. After the bearings were removed, ex- 
amination indicated that they were in good con- 
dition and that the failure was caused bya defect 
in the stator can or that operation of the pump 
at a low system pressure had resulted in stator 
collapse. !®26.35 The second failure, on Dec. 17, 
1958, occurred when the plant was being cooled 
down and the pump was operating at slow speed. 
The bearings were found to be severely dam- 
aged. It was concluded that hydrogen, which 
came principally from common vent lines con- 
necting the pressurizer and the pump, had 
caused steam and gas binding in the bearing 
area. The pressurizer vent was later separated 
from the common header.”!-?9.39 The third fail- 
ure occurred in October 1959, when the pump 
failed to start at slow speed after having been 
in a hot standby condition for about 25 days. 
The pump was removed for examination,”4,?9 but 
results of the examination have not yet been re- 
ported. 


One heat exchanger developed primary-to- 
secondary fluid leakage, and the steam drum 
sight glass failed on another heat exchanger. A 
hydrostatic test of one of the main heat ex- 
changers in February 1959 showed two tubes to 
be leaking. Examination revealed that failure 
Was caused by stress-corrosion, probably as a 
result of steam-blanketing and boiler-water 
chemistry deviating from the specification with 
respect to free hydroxide. Seventeen damaged 
tubes were plugged by expanding blind nipples 
inside the tube; two additional risers were 
added; and water-chemistry control was modi- 
fied. About a year later, on Mar. 9, 1959, iodine 
activity was detected on the secondary side of 


the same boiler, indicating renewed leakage. 
The level of activity indicated”! leakage at an 
estimated rate of about 0.2 ml/min. The iodine 
activity persisted, but the activity level [less 
than 1 dis/(min)(ml)] was not high enough to 
present a problem. At the end of Seed 1 life, a 
leak test showed nine tubes to be leaking, and 
the boiler was removed for examination.!8~?0,24 
In July 1959, the upper-level sight glass on 
another boiler shattered and allowed the boiler 
chamber to fill with steam. Attempts to enter 
the boiler chamber were unsuccessful because 
of the steam until the loop was shut down. A 
design change was initiated to provide combina- 
tion ball-check and manual stop valves that 
would immediately isolate a defective sight 
glass (references 21, 22, 277, and 29). 

Although all relief valves were tested under 
full-scale simulated plant conditions prior to 
installation, both of the self-actuated pres- 
surizer steam-relief valves leaked during initial 
plant operation. Seat damage, apparently caused 
by foreign particles, was discovered and re- 
paired, but slight leakage continued to occur 
whenever the system pressure approached the 
set point.'* A measurement of plant leakage in 
September 1959 indicated’? a leakage of 0.5 
gal/hr from relief valves and a total primary 
plant leakage of 14.1 gal/hr (about 1.7 per cent 
per day). 

Experience showed that there was a far 
greater amount of personnel traffic through the 
containment-vessel interlocks than had been 
anticipated during design. This indicated aneed 
for a more positive indication of the closure 


’ status of airlock doors, as well as amore posi- 


tive means for interlocking the inner and outer 
doors.*® On one occasion, maintenance per- 
sonnel attempted to open the inner door before 
the airlock test pressure was reduced to cham- 
ber pressure. The door blew open and was 
knocked out of alignment. A caution sign was 
placed on the outer door to prevent use until the 
damaged door was realigned.?! Small submarine 
type access doors that are self-venting and have 
a mechanical interlock are to be mounted onthe 
present doors of three airlocks, and larger 
pressure-equalization -valves will be provided 
on the remaining airlocks,”5.29 Data*® from a 
containment-vessel leak test at an internal 
pressure of 9.8 psig were extrapolated to pre- 
dict a leaktightness of 0.1675 + 0.0336 per cent 
of the net contained volume in 24 hr at the de- 
sign internal pressure of 52.8 psig. 
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Kinetics — 

The seed-and-blanket type core of the PWR 
possesses the dynamic response and negative 
temperature coefficient characteristics of a 
small highly enriched core. The load-following 
capability was dramatically illustrated at the 
termination of the first 100-hr full-power run. 
Upon shutdown the turbine throttle was tripped 
with the plant at full power. The reactor was 
not on automatic control, and the reactor opera- 
tor did not move rods manually until 20 to 30 
sec after the throttle trip occurred. The auto- 
‘matically controlled steam dump was not in 
service. The resulting peak coolant temperature 
rise was 12°F, and the coolant pressure rise 
(180 psi) did not exceed the setting of the 
pressure-relief valves. '® 


Similar sudden-loss-of-load tests were per- 
formed frequently during Seed 1 lifetime. The 
reactor response continued to be very good, but, 
after a core life of about 2000 EFPH, throttle- 
trip tests indicated that either automatic rod 
insertion or controlled steam release was nec- 
essary to prevent operation of the pressurizer 
pressure-relief valve. The increased excur- 
sions in coolant conditions were attributed to a 
lowering of the magnitude of the negative tem- 
perature coefficient with core life.”?° The 
measured temperature coefficient gradually di- 
minished from —2.2 x 10/°F after 160 EFPH 
to -1.0x 10~*/°F at the end of Seed 1 life.?°»”6 
The plant" is expected to be stable as long as 
the negative temperature coefficient is as much 
as —0.5 x 107*/°F. 


The presence of extensive nuclear and thermal 
instrumentation in the PWR has enabled direct 
observation of xenon-induced instabilities. A 
successful attempt to override peak xenon in 
March 1959 resulted in the first observation 
that power oscillations were occurring across 
two opposite quadrants of thecore. Theoscilla- 
tion phenomenon was subsequently studied during 
the next two 1000-hr continuous full-power runs. 
The oscillation was induced by intentional asym- 
metric displacement of control rods, followed 
by return of the control rods tothe banked posi- 
tion. The period of oscillation was determined 
to be approximately 24 hr. The magnitude of 
asymmetry from the oscillations was limited to 
prescribed levels (+6 per cent) by compensating 
asymmetric rod motion ofthe controlling groups 
of rods. In particular, PWR experience has 
demonstrated that, with adequate instrumenta- 


tion, the reactor operator can be aware of such 
oscillations and that an informed operator can 
easily control their magnitude. 


Abnormal Operation 


Operating statistics of the Shippingport plant 
are colored by the dual nature of the project 
objectives, i.e., power production and experi- 
mentation. The operating plan has included long 
full-power runs of approximately 1000-hr dura- 
tion and shutdown periods of perhaps a month 
for physics measurements, plant tests, and 
training. Normal operations have been fre- 
quently interrupted to permit planned tests to 
be conducted. Such interruptions are in addition 
to those required for maintenance or by action 
of the safety system. On the other hand, certain 
design features that would probably not be in- 
cluded in a plant intended solely for power pro- 
duction, such as a complete spare primary 
coolant loop, have permitted operation at full 
power to continue while major maintenance was 
being performed. Thus, although it is perhaps 
interesting to note that the plant load factor 
(defined as the net power output divided by the 
theoretical net output if the plant operated con- 
tinuously at full power) was less than 30 per 
cent for the period between criticality with 
Seed 1 and criticality with Seed 2 and that it 
was greater than 95 per cent during some ex- 
tended power runs, such statistics have little 
or no significance as a measure of the capability 
of the PWR or other nuclear power plants. 


As a routine matter, all scrams, safety shut- 
downs, and other significant incidents have been 
investigated and described in periodic progress 
reports.'*-® A cumulative listing of such inci- 
dents during the first year of PWR operation is 
included in reference 18. The frequency of inci- 
dents has varied, of course, but a month of op- 
eration might typically include one or two safety 
shutdowns and four or five other incidents of 
appreciable import. A study of the incidents re- 
ported during the life of Seed 1 has revealed 
that none resulted in damage to the reactor oF 
in a situation which threatened the uncontrolled 
release of appreciable amounts of radioactivity. 
Furthermore, there were no cases in which the 
safety system was called upon and failed to re- 
spond. Although the PWR safety-system experi- 
ence is devoid of spectacular lessons, it is in- 
dicative of the situations encountered in the 
operation of a large nuclear power plant. 
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Loss-of-load accidents occurred on more 
than one occasion, * but the consequences were 
negligible because of the reactor response 
characteristics discussed previously. Inonein- 
stance the station was back to 75 per cent power 
within less than 1 hrafterthetrip.”* An example 
of the classical error of the operator turning 
the wrong handle resulted in a safety shutdown 
while Group III rods were being programed out 
to their limit of travel. Group IV rods were in- 
advertently moved instead of Group III, and, as 
a result, the nuclear level”’ exceeded the set 
point of 109 per cent. 

An unusual incident involving the reactor 
containment vessel occurred when a false signal 
from the operational radiation-monitoring sys- 
tem resulted in automatic closure of the butter- 
fly valves inthe containment air-cooling system. 
Before the valves could be reopened, the air 
temperature and the pressure in the contain- 
ment vessel increased to levels such that the 
containment pressure-trip device prevented 
opening of the butterfly valves. The pressure- 
trip device had to be disconnected while the 
cooling system was being returned to normal 
service.”” On another occasion, while the reac- 
tor was critical, it was discovered that the 
“Test-Operate” switch was in the “Test” posi- 
tion rather than in the “Operate” position. In 
the “Test” position the maximum flux limit pro- 
tection is removed from service, whereas in the 
“Operate” position all protection is in effect. 
When the shift engineer switched to “Operate,” 
a safety shutdown occurred, which was later 
traced to a defective magnetic amplifier.2! Ap- 
parently the design did not provide means for 
preventing or annunciating the disablement of a 
portion of the safety system in this manner. 

A total loss of a-c power to the station re- 
sulted when one of the 138-kv-transformer 
lightning arresters was inadvertently sprayed 
with water during a routine fire drill. At the 
time, control rods were being withdrawn to at- 
tain criticality. A safety shutdown resulted, and 
the emergency transformer was placed into 
service.'*> This accident is significant only as 
an example of a highly improbable accident 
mechanism; it illustrates, however, why it is 
reasonable in an accident analysis to consider 
failure of vital portions of the plant even though 
no cause for failure is apparent. 

The necessity for testing emergency proce- 
dures was illustrated during the performance of 
4 simulated primary coolant leak test. In the 


test, control rods were bottomed, and a major 
rupture was simulated by valving a 40 gal/min 
leak in one of the loops. The operator was sup- 
posed to locate and isolate the leak by following 
an emergency procedure. Misinterpretation of 
the procedure resulted in the reactor being 
isolated from all four coolant loops. This error 
could have endangered the core by preventing 
normal circulation to remove decay heat and, if 
the rupture had occurred in the reactor vessel, 
by preventing escaping water from being re- 
plenished. The procedure was subsequently 
clarified to avoid this error.*® 

(H. C. McCurdy and T. D. Anderson) 


Action on Reactor Projects 
by Licensing and Review Bodies 


In the course of securing final approval for 
the operation of a power reactor, the applicant 
must clear several hurdles designed to assure 
the AEC, and thus the public, that the safety of 
the public has been adequately considered ina 
responsible manner. The procedure involves 
two major steps: (1) securing a construction 
permit and (2) securing an operating permit, as 
described in Title 10, Code of Federal Regula- 
tions. 

Three proposed amendments affecting the li- 
censing of production and utilization facilities 
were published in the Federal Register.*® One 
amendment was intended to restrict the amount 
of work which may be done on a reactor facility 
before the issuance of a construction permit; 
specifically, it prohibits the laying of foundation 
and construction of any portion of the permanent 
facility on the site. The second proposed amend- 
ment provides for the issuance ofa construction 
permit in instances where research and develop- 
ment on the reactor system may still be re- 
quired. In such an instance a provisional permit 
will be issued, provided there is reasonable 
assurance from a safety standpoint that the site 
is suitable for a reactor of the power level and 
general design concept proposed. (The amend- 
ment was proposed before announcement of the 
court decision in the Power Reactor Develop- 
ment Company case, which is discussed at the 
end of this section, and it is not certain what 
effect this amendment, if it had been adopted 
earlier, might have had on that decision.) The 
third proposed amendment would permit the 
conversion of a construction permit into a pro- 
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visional operating license in advance of the 
scheduled startup so that transition could be 
made from construction to operation without 
delay. This would also facilitate the conversion 
from construction permit to operating license 
in cases in which involved features of the plant 
made it desirable to obtain actual operating ex- 
perience before a full-term operating license 
was issued. 

The processes involved in obtaining a con- 
struction permit and in obtaining an operating 
license require the preparation of a hazards 
summary report, which must be reviewed and 
approved by both the AEC Hazards Evaluation 
Branch (HEB) and the Advisory Committee on 
Reactor Safeguards (ACRS). As the final step 
before each license is issued, a public hearing 
is held. As a consequence of these various ad- 
ministrative reviews, any given reactor may be 
involved in reviews for a period of years. 
These reviews frequently result in modification 
of the reactor design or operation to enhance 
safety and, in any case, constitute the precedents 
for “adequate” safety. 

Most power reactors proposed for construc- 
tion and operation in this country are currently 
involved in some stage of the review process. 
The reactors discussed below have passed some 
milestone in the process during the quarter 
covered by this Review. 


Big Rock Point Nuclear Power Plant 
(AEC Docket 50-155) 


A provisional construction permit has been 
issued to Consumers Power Company for the 
proposed boiling-water nuclear power stationat 
Big Rock Point, Mich.‘! Issuance of the license 
followed approval by the ACRS and the HEB 
and a public hearing in Washington, D. C., on 
Mar. 29, 1960, in which the State of Michigan 
participated as an intervenor. 

The reactor” will be a forced-circulation 
boiling-water plant having a maximum expected 
gross electric power generating capacity of 75 
Mw [240 Mw(t)]. Although the construction per- 
mit covers a plant with this ultimate capacit,, 
operation with the initial core is not expectedto 
exceed 156 Mw(t). The steam generated in the 
reactor core will flow to the steam drum and 
then to a turbine, with no heat exchanger be- 
tween. The reactor and its auxiliary equipment, 
except the turbine, will be situated within a 
containment vessel designed to adequately con- 


tain the radioactive materials released in the 
“maximum credible accident,” 

In concluding that the reactor of the proposed 
type and power level could be constructed at the 
proposed site with reasonable assurance that it 
could be operated without undue risk to the 
health and safety of the public, the ACRS com- 
mented® on the unusual 4-year research and 
development program and noted that the detailed 
design and experimental program will require 
additional study. 

The intervention“ of the State of Michigan, in 
behalf of the people of that state, resulted from 
the desire of Michigan authorities to assure 
themselves of the adequacy of the proposed 
waste-disposal practices and activity monitoring 
techniques. The testimony*® of the HEB repre- 
sentative, J. J. DiNunno, noted that the hydrology 
of the site gave rise to safety concern but that 
the plant was to be designed to compensate for 
this feature by the use of retention basins, area 
and waste monitoring, and dikes for the control 
of surface runoff of accidental leakage. 

The testimony of DiNunno further noted that 
the new features in the reactor include the use 
of fuel elements designed for a burnup of 15,000 
Mwd/ton and provision for operation at core 
power densities of up to 45 watts/cm*. The 
latter feature will be tested first on a partial 
core in the Vallecitos Boiling-Water Reactor, 
and such operation will not be attempted in the 
Big Rock Point reactor unless it has been proved 
that the high power densities can be achieved 
safely. Although it is expected that the core will 
be adequately instrumented for high-power- 
density operation, details of the instrumentation 
are not yet available. The HEB therefore re- 
served judgment on the instrumentation, as well 
as on the control system, which is tobe similar 
to that in the Dresden power plant. 

Among the other points raised at the hearing 
was the question of whether the proposed AEC 
regulation, which would prohibit the pouring of 
concrete for foundations before a construction 
permit was issued, would apply to the turbine 
building as well as to the nuclear ‘portion of the 
plant.‘® Although both the Consumers Power 
Company and the AEC agreed that it did not, it 
was noted that there was some ambiguity in the 
proposed regulation as applied to single-cycle 
reactors. The AEC Hearing Examiner, in his 
intermediate decision,‘! which became final on 
May 28, 1960, ordered the issuance of a pro- 
visional construction permit and concurred ia 
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the reservations expressed, as mentioned above, 
in the hearing testimony. 


Boiling Nuclear Superheater Power Station 
(AEC Docket PP-4) 


A hearing“ on the granting of a construction 
permit to the Puerto Rico Water Resources 
Authority for the Boiling Nuclear Superheater 
(BONUS) Power Station at Punta Higiiera, Puerto 
Rico, was held on Apr. 27, 1960. The reactor 
will employ a central forced-circulation boiling 
region and a peripheral four-pass steam-cooled 
region in which steam will be superheated and 
then passed directly to a turbine. The reactor’ 
is designed for a thermal power level of 50 Mw, 
with an electrical output of 17.3 Mw. The com- 
plete reactor facility, including the reactor 
turbine-generator, fuel-handling facilities, and 
radioactive-waste-disposal facilities, is to be 
housed in a low-pressure hemispherical con- 
tainment building of steel and concrete. 

At its March 1960 meeting the ACRS reviewed 
the proposed plant and concluded that it could be 
constructed with reasonable assurance that it 
could be operated without undue risk to the 
health and safety of the public. The ACRS noted, 
however, that prior to operation there are 
several features which will have to be shown 
not to be hazardous. These include the radioac- 
tive contamination of the turbine, the long-term 
integrity of the fuel elements, and the nuclear 
superheater. 

The AEC review of the facility was discussed 
by R. H. Bryan of the HEB.“ In this case also, 
concern was expressed over the experimental 
nature of the superheater and the integrity of 
the fuel elements, particularly those in the 
superheater section. The concern with respect 
to the fuel elements was mitigated by the exist- 
ence of provisions for detecting defective ele- 
ments, the flexibility of operation with respect 
to power distribution, and the inherent protec- 
tion of the primary system from damage from 
4 superheater failure, as well as theuseof rea- 
sonable hot-channel factors in estimating fuel- 
element temperatures. The HEB testimony also 
commented on the unique nature of the contain- 
ment building and concluded that a structure of 
this type would provide adequate containment. 
This conclusion was reached despite the seem- 
ingly high site-boundary exposure doses calcu- 
lated for the maximum credible accident, be- 
(ause the assumptions employed in making the 


calculations were “severely conservative.” The 
only unusual site hazards were earthquakes and 
hurricanes, which, Bryan said, were adequately 
provided for in the design and location of the 
plant. 


Carolinas-Virginia Tube Reactor 
(AEC Docket 50-144) 


A provisional construction permit was au- 
thorized by the AEC Hearing Examiner for the 
Carolinas-Virginia Nuclear Power Associates 
pressure-tube reactor‘® in April 1960, and the 
decision became final on May 4, 1960. This ac- 
tion followed the hearing on Feb. 23, 1960, which 
was reviewed in the June 1960 issue of Nuclear 
Safety. The Hearing Examiner, in submitting 
his intermediate decision, noted that the appli- 
cant had submitted amendments to his original 
proposal to the ACRS before the latter’s final 
review of the proposal. Thus, although the ACRS 
did not specifically mention these amendments 
in its approval of the project, it must be as- 
sumed that they had the opportunity to do so. 
The construction permit was described as pro- 
visional in that an operating license will not be 
issued until evidence is presented on test results 
with respect to the novel features of the design, 
specifically, the use of heavy water, the U- 
shaped pressure tubes, and the Zircaloy-clad 
fuel elements. 


Dresden Nuclear Power Station 
(AEC Docket 50-10) 


The proceedings leading to the authorization 
of the Commonwealth Edison Company to operate 
the Dresden Nuclear Power Station at power 
levels up to 315 Mw (50 per cent of design) were 
discussed in the March 1960 issue of Nuclear 
Safety.*! Fuel loading of the Dresden reactor 
for operation at power levels up to 315 Mw was 
halted, however, because of mechanical diffi- 
culties in the control-rod drive mechanism.” 
The trouble was investigated, and it proved to 
be due to the breakage of ashear pin which per- 
mitted the separation of certain sections of the 
control rods from their drive mechanisms. 
Modification of the rods to prevent this type of 
failure was reported by the General Electric 
Company, and subsequent tests of the drives in- 
volving over 500 scram cycles substantiated 
the reliability of the modified mechanism. As a 
consequence of this difficulty with the control- 
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rod drive mechanism, the AEC Division of Li- 
censing and Regulation asked the Commonwealth 
Edison Company for additional information on 
the operation of the plant in the event a rod 
should become disengaged and the consequences 
which could be expected if a rod became stuck. 

After the control rods had been modified, re- 
installed, and tested, permission was granted 
for operation according to the previously ap- 
proved test program at thermal power levels up 
to 315 Mw. The plant attained this power level 
on Apr. 13, 1960, and, in a subsequent report™ 
submitted in accordance with their license 
agreement, it was concluded that “the reactor 
has exhibited extremely good characteristics of 
control and stability [and that there is] every 
indication ... that the reactor will continue to 
respond in a similar manner as higher operating 
powers are attained.’’ 

At its May 1960 meeting the ACRS reviewed 
the Dresden operational experience up to one- 
half design power and concluded™ that there was 
nothing to “preclude continuing the approach to 
full-power operation under carefully planned test 
and operational procedures which will assure a 
prompt shutdown of the reactor in the event of 
significant departures from expected perform- 
ance of the reactor or its control equipment.’’ 
The ACRS went on to emphasize that: 


For some time to come... operations at the 
Dresden power plant must be considered to be de- 
velopmental in nature. The large size of the reac- 
tor and the relatively novel aspects of some of its 
control features go considerably beyond prior 
experience with boiling-water reactors .... Until 
such time as there has been a substantial period of 
operation at full power, the Committee advises that 
visitor access to the plant be restricted to those 
having an official reason for such visits. A hearing 
will be held to consider the presence or absence of 
good cause respecting the granting of an operating 
license for the full-power-level operation of the 
Dresden reactor. 


Experimental Low-Temperature Process 
Heat Reactor Project 


The Experimental Low-Temperature Proc- 
ess Heat Reactor (ELPHR) is a 40-Mwi(t) 
pressurized-water reactor employing a single 
steam generator. The reactor is experimental 
only in that it will be the first reactor to be 
used to produce process steam rather than 
turbine-quality steam. The first site” proposed 
for this reactor was on Point Loma just outside 


San Diego Bay on the southern California coast. 
At its March 1960 meeting the ACRS reviewed" 
this site proposal and concluded that it wouldbe 
unwise, from the safety point of view, to locate 
the reactor at this site at the presenttime. The 
reasons given were that the site had “unfavor- 
able meteorology and high population density 
aggravated by recreational and fisheries as- 
pects and lack of ocean dilution. The close 
proximity of the San Cabrillo Monument area 
[and] the experimental nature of the proposed 


installation’’ were factors. Objection to the site 
had also been voiced by the Navy, which owns 
adjoining property and has planned to set upa 
base for its nuclear-powered submarines. 

After the Point Loma site was rejected, the 
AEC Division of Reactor Development, which is 
sponsoring the project, selected a site at Point 
Mugu, Calif., on the coast north of Los Angeles. 
The site report’’ was subsequently reviewed 
and approved by the ACRS. In a letter® that was 
issued following the May meeting of the ACRS, 
it was noted that: 


The proposed site appears to afford a degree 
of atmospheric dilution comparable with the most 
favorable that can be found in this coastal area, 
Because of the isolation afforded, as a result 
of site location relative to terrain features and 
government-owned land, the Committee believes 
that the indicated site is acceptable ... . [However] 
it may benecessary toincorporate sufficient holdup 
capacity in the design of the plant to ensure that 
routine water-gas discharge to the atmosphere can 
be monitored and limited to periods of favorable 
atmospheric dilution conditions. 


Hallam Nuclear Power Facility 
(AEC Docket PP-3) 


The Consumers Public Power District pro- 
poses to construct and operate the Hallam Nu- 
clear Power Facility (HNPF) in southeastern 
Nebraska. The plant is to consist of a 240- 
Mw(t) sodium-cooled graphite-moderated reac- 
tor (SGR) and the required associated equipment 
for generating electric power.*® The reactor fuel 
is to be uranium-molybdenum alloy, and the 
plant is to be contained (not ina steel pressure- 
containment shell, as are most boiling- and 
pressurized-water reactor systems) in a build- 
ing that is to be maintained at a subatmospheric 
pressure by continuous venting through filters. 

In 1959, the ACRS reviewed the proposed fa- 
cility and concluded® at that time that “consid- 
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ering the SRE experience, the isolated site... 
and the design proposed ... , the proposed reac- 
tor can be constructed with reasonable assur- 
ance that it can be operated without undue risk 
to the health and safety of the public.’’ The 
ACRS also noted that “the system is contained 
in a number of interconnected steel-lined con- 
crete cavities [which should] be capable of con- 
taining fission products that might be released 
accidentally.’”” However, “an improved filter 
system for collecting radioactive fumes from a 
sodium fire, should oneoccur, will be required.” 

Following the accidental melting of fuel ele- 
ments in the SRE, *! and in viewof the fact that a 
portion of the ACRS safety evaluation of Hallam 
had been based upon the SRE experience, a re- 
port was submitted by the applicant on the ap- 
plicability of the recent SRE experience to 
HNPF.” The report indicated that the SRE ex- 
perience had been utilized to effect new design 
features that will be incorporated in the HNPF. 
The ACRS” then stated that it saw no reason to 
change its previous opinion relative to the con- 
struction of the HNPF. 

On Apr. 8, 1960, a hearing™ was held to con- 
sider the issuance of a construction permit. 
Testimony on health and safety aspects of the 
proposed facility was presented by M. B. Biles 
of the HEB. The site was characterized as fa- 
vorable, as were salient features of the design, 
including low-pressure primary and secondary 
systems, multiple barriers between sodium and 
water, provisions to prevent and/or minimize 
the possibility of a sodium fire, the stability of 
the reactor, and the multiple safety devices. 
The dependence of the control of accidentally 
released activity on the operability of the filter 
was noted, and further developmental effort to 
preclude the possibility of filter plugging by 
sodium fumes was recommended. The hearing 
was routine, and the decision of the examiner 
Will be announced at a later date. 


Humboldt Bay Power Plant 
(AEC Docket 50-135) 


The Humboldt Bay Power Plant,®‘ which the 
Pacific Gas and Electric Company proposes to 
construct on Humboldt Bay, south of Eureka, 
Calif., is to employ a 200-Mw(t) boiling-water 
teactor and pressure-suppression containment 
(see Section IV, p. 49). This latter feature, the 
host unique aspect of the proposed plant, is to 
consist of a concrete chamber, or dry well, in 


which the reactor is located and which is vented 
to a surrounding pool of water in another con- 
crete vessel called the suppression chamber. 
In the event of an accident, the dry-well atmos- 
phere would be vented through the pool water 
which would condense the steam released in the 
accident; consequently, only nominal pressures 
would result even from the maximum credible 
accident. 

This reactor and its containment concept were 
reviewed by the ACRS at its March 1960 meet- 
ing. The ACRS concluded that the reactor sys- 
tem would be suitable for the proposed site if it 
were provided with the conventional pressure- 
vessel type of containment. The ACRS thought 
that the information provided did not make clear 
how much of the total reactor system would 
be housed within the proposed pressure- 
suppression chamber, nor did it “demonstrate 
the suitability of the steam-condensing system.”’ 
Therefore the steam-condensing system cannot 
yet “be relied upon to protect the health and 
and safety of the public at this site.’’ 

. The hearing on the granting of a construction 
permit, which had been set for Apr. 14, 1960, 
was subsequently postponed at the request of the 
Pacific Gas and Electric Company. The Com- 
pany indicated that it would need more time 
to carry out further tests on the pressure- 
suppression containment system. 

Prior to the ACRS decision, T. N. Saunders, 
Chief, Division of Industrial Safety, California 
State Department of Industrial Relations, noti- 
fied the HEB of his objections to the proposed 
containment system, which were based upon 
(1) the fact that all the reactor system was not 
located within the containment system and 
(2) his belief that a pressure-vessel failure is 
as probable as a pressure-piping failure. This 
latter point has not been treated seriously in 
most hazards reports to date. The Pacific Gas 
and Electric Company justified the assumption 
that the pressure vessel would not fail on the 
reputed statistical fact that, in over 4000 boiler- 
years of operation at pressures in excess of 
600 psia, there has never been a vessel failure. 


Plum Brook Reactor Facility 
(AEC Docket 50-30) 


The National Aeronautics and Space Adminis- 
tration (NASA) has built a nuclear research re- 
actor at the Plum Brook Research Facility near 
Sandusky, Ohio." This 60-Mw/(t) research reac- 
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tor is of the light-water-cooled and -moderated 
MTR type, with a primary beryllium reflector 
and secondary water reflector, and it is to be 
used in the development of a nuclear reactor 
system for aeronautical and space applications. 
NASA’s request for an operating license for this 
facility is currently being reviewed. In February 
1960, the Division of Licensing and Regulation 
specifically® noted that certain additional infor- 
mation should be submitted in order to complete 
the evaluation of the operating-license request. 
_The specific information requested included 
(1) reactor operating principles and policies, 
(2) emergency procedures, (3) personnel quali- 
fication and training programs, and (4) a résumé 
of crucial parameters and numerical constants 
that constitute the specifications and limitations 
within which the plant will be operated. It is 
considered that the issuance of an operating li- 
cense should be at least as dependent upon the 
quality of the operating program and personnel 
as on the integrity of the system design. Fur- 
thermore, in a test reactor it is essential to 
establish the limits beyond which the reactor 
may not be operated without an amendment to 
the operating license. The requested informa- 
tion was supplied by NASA in a supplement to 
their final hazards report.” 

The ACRS reviewed the reactor facility at its 
March 1960 meeting®™ and concluded that the 
reactor “should be capable of being operated 
without undue hazard to the health and safety of 
the public.’”’ The ACRS specifically excluded 
comment on the operating procedures or the de- 
sign of experiments, but they noted that in view 
“of the necessity of controlled release of radio- 
active gas and liquid effluents ... proposed ex- 
periments would have to be carefully reviewed 
and appropriate limitations [imposed].’’ It is 
presumed that the Division of Licensing and 
Regulation will require adequate assurances of 
the internal NASA review of experiments within 
the scope of the license and that operation or 
experiments beyond the specified scope will 
subsequently be reexamined as amendments to 
the proposed license. 


Pathfinder Atomic Power Plant 


(AEC Docket 50-130) 


The Pathfinder Atomic Power Plant® is pro- 
posed for construction by the Northern States 
Power Company on the Big Sioux River, 3.5 
miles northeast of Sioux Falls, S. Dak. The 203- 


Mw(t) reactor is to bea controlled-recirculation 
boiling-water system with nuclear superheat. 
The ACRS approval of this plant and the subse- 
quent testimony and hearing on the issuance of 
a construction permit were discussed in the 
June 1960 issue of Nuclear Safety.” In an in- 
termediate decision filed by the Hearing Ex. 
aminer in April 1960, the issuance of a pro- 
visional construction permit was authorized." 
The authorization was described as provisional 
because it was subject to the condition that: 


An authorization to operate the facility will not 
be issued by the Commission until the proposed re- 
search and development program has been com- 
pleted [and satisfactory evidence obtained that] the 
novel reactor features respecting the fuel elements 
in the boiler region of the core, the incorporation 
of a superheater with unproven type of fuel elements 
as an integral part of the basic reactor core, and 
the proposal that a variable rate of primary coolant 
recirculation be utilized for control ... has been 
constructed and can be operated with adequate pro- 
tection to, and without endangering the health and 
safety of, the public. 


Peach Bottom Atomic Power Station 


The Peach Bottom Atomic Power Station” 
consists of a 115-Mw/(t) helium-cooled graphite- 
moderated reactor witha single steam generator 
located within the steel containment shell anda 
single turbine located outside the shell. The 
Philadelphia Electric Company proposes to 
construct and operate this plant at a site on the 
west shore of the Susquehanna River, 9 miles 
upstream of Conowingo Dam. The ACRS re- 
viewed the proposal at its March 1960 meeting 
and concluded” that the site “provides a gen- 
erally acceptable degree of isolation considered 
in relation to the proposed high integrity of con- 
tainment.’’ The ACRS had first noted that: 


The design of this reactor, although not yet fixed, 
will necessarily be such that routine reactor opera- 
tion may be accompanied by considerable fission- 
product contamination of the coolant-gas stream 
[which places] particular emphasis on the need for 
reliability of the helium coolant system, the a8s0- 
ciated fission-product traps, and the outer contain- 
ment shell .... The location of this reactor 0 
Conowingo Pond, which is a potential supply of water 
tothe City of Baltimore and serves several smaller 
cities, makes mandatory an especially careful con- 
sideration of factors which might lead to pond con- 
tamination. 
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Plutonium Recycle Test Reactor 


The 70-Mw(t) Plutonium Recycle Test Reac- 
tor (PRTR)," now nearing completion at Hanford 
by the General Electric Company, is avertical- 
pressure-tube reactor cooled and moderated 
with heavy water. The reactor is housed ina 
steel containment vessel, and heat is to be 
removed from the primary coolant by an inter- 
mediate light-water system and dumped into the 
Columbia River. The reactor is designed to ob- 
tain experimental data on plutonium fuel tech- 
nology and plutonium fuel-cycle physics and to 
produce irradiated fuel for the development of 
plutonium fuel chemical reprocessing. At its 
January 1960 meeting the ACRS reviewed the 
PRTR and concluded” that “the proposed site 
and containment were suitable for the general 
reactor as conceived at that time.’’ The ACRS 
noted, however, that “operating procedures and 
certain design details are still under considera- 
tion, and we must [therefore] reserve judgment 
until we are informed on the results of these 
studies.”” The results of the required additional 
studies were subsequently reported by the Gen- 
eral Electric Company in a supplement to the 
original PRTR hazards report,” and, on the 
basis of the additional information, the ACRS 
concluded” at its May 1960 meeting that: 


Most of the details [previously mentioned by the 
Committee] are being satisfactorily settled. How- 
ever, the following comments seem pertinent: 

1, Filters should be installed at the outlet of the 
containment ventilating system. 

2, Experimental information on void coefficients 
will be developed during the critical experiment 
program. Efforts to avoid a positive void coeffi- 
cient should not be relaxed. 

3. The Committee is skeptical of the claimed ad- 
vantages of automatic control under any other con- 
dition than constant power. 


Yankee Nuclear Power Station 
(AEC Docket 50-29) 


The Yankee Nuclear Power Station contains a 
Pressurized-water reactor designed to operate 
ata power level of 485 Mw(t). The proposed op- 
trational plans for this reactor, as describedin 
the Final Hazards Summary Report and Amend- 
ments 1 to 18, were reviewed by the ACRS, and 





‘~proval of its operation was recommended, as 
mentioned in the June 1960 issue of Nuclear 
Safety."® A hearing was also held to consider 
idence regarding the technical specifications 


for the reactor” since approval of the technical 
specifications was required in order to remove 
the provisional character of the construction 
permit, a necessary prerequisite to application 
for an operating license. The technical specifi- 
cations were established, with the advice of the 
HEB, to identify the particular reactor being 
licensed, as well as to establish those systems 
or parts thereof which would affect the safety 
evaluation for that reactor to such an extent as 
to require AEC review and approval of any 
changes. Dr. C. K. Beck of the HEB testified 
that: 


With the exception of the details already dis- 
cussed concerning the final design of the system 
for disposing of wastes from the secondary coolant 
loops, which we believe can be easily developed into 
a system that will be acceptable safetywise, we 
conclude that the integrated Yankee nuclear power 
plant design is satisfactory and that the Yankee Nu- 
clear Power Station can be operated in accordance 
with the proposed procedures, schedules, and tech- 
nical specifications, as revised at power levels up 
to 392 Mwi(t), without undue risk to the health and 
safety of the public. 


It should be noted that the approved power level 
is only 80 per cent of the design power level. 
Beck recommended that at least 500 hr of 
operating experience be accumulated at the 
392-Mw level before a review is undertaken to 
ascertain the safety of operation at a higher 
level. 

Subsequent opinions on the hearing were pre- 
sented by both the Yankee Atomic Electric 
Company®’ (YAEC) and the AEC.*! The YAEC 
counsel, D. G. Allen, commented on the pro- 
priety of approving at the construction stage the 
provisions in the Proposed technical specifica- 
tions covering operating procedures and re- 
strictions. In the proposed findings and con- 
clusions submitted by the AEC counsel, Gerald 
Charnoff, it was recommended that the technical 
specifications be incorporated into the YAEC 
construction permit and that the latter be con- 
verted from a provisional to a definite con- 
struction permit. Commenting on the YAEC 
position with regard to safety reviews at an 
earlier stage, Charnoff stated that the Atomic 
Energy Act “allows for determination of the 
safety issues prior to the operating license pro- 
ceeding to the extent permitted by the record, 
although such determination would be subject to 
review at the licensing proceeding in light of 
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new information or the showing of good cause as 
to why the license ought not be issued.’’ 

The Hearing Examiner, S. A. Jensch, in his 
intermediate decision® supported the YAEC 
position to the extent of deciding that the tech- 
nical specifications should be conditionally ap- 
proved and that final approval would have to 
await evidence on final design as reflected by 
completed construction. Jensch also ordered 
another hearing to consider issuance of an op- 
erating license. 

_ In other actions on the Yankee Nuclear Power 

Station, the ACRS reviewed®® Amendments 19 
and 20. These two amendments concern the dis- 
posal of activity from steam-generator leakage 
and other design and procedural changes, in- 
cluding tests at 2000-hr intervals to determine 
the effects of plutonium buildup. The ACRS 
considered Amendments 19 and 20 to be satis- 
factory, but it stated that details of the test 
program will have to be approved when they be- 
come available. 


Enrico Fermi Atomic Power Plant 
(AEC Docket F-16) 


The Enrico Fermi plant, which the Power 
Reactor Development Company (PRDC) proposes 
to construct at Lagoona Beach, Mich., includes 
a 300-Mw fast breeder reactor. The hearing on 
the issuance of a construction permit was re- 
viewed in an earlier issue of Nuclear Safety,® 
and it was noted that the intervening AFL-CIO 
labor unions had filed suit in the U. S. Court of 
Appeals (AEC Docket 15,271) for the District of 
Columbia asking that the construction permit for 
this reactor be set aside. In adecision released 
in mid-June following the hearings in March, **-* 
the Court of Appeals held that there was insuf- 
ficient evidence showing that the reactor could 
be operated safely, and therefore the court set 
aside the construction permit. The court thus 
upheld the unions’ contention that: 


The AEC had violated its own rules in that it did 
not make certain findings in its August 1956 order 
issuing a provisional construction permit to PRDC 
for the fast breeder reactor at Lagoona Beach, 
Michigan. (er) 

The unions held that the findings of the hearings 
were to establish whether: 

(1) There was reasonable assurance that the re- 
actor may be constructed and operated at the pro- 
posed site without undue risk tothe health and safety 
of the public. 
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(2) The applicant is financially qualified to con- 
struct and operate the reactor for the period of the 
license requested, to pay [the] Commission for the 
nuclear material used during operation, and to use 
that material for a reasonable period of time. 


In the brief by the attorney for the petitioners, 
it was claimed that “since the Commission did 
not make any of these findings, the permit to 
PRDC was issued in violation of the law and 
must be set aside.’’ The attorney for the peti- 
tioners also contended that: 


It was the intention of Congress, in establishing a 
two-step licensing procedure, that an applicant who 
received a permit to construct a nuclear reactor 
should have substantial assurance that, if the reac- 
tor is built in accordance with the conditions of the 
permit, a license to operate will be granted, and 
therefore the essential findings with respect to 
safety should be made at the time the construction 
permit is issued. This protects the paramount in- 
terest of the public in safety, and, at the same time, 
encourages private industry toinvest the very large 
sums of money required for such construction, 


The brief filed by the AEC and the U. S. Gov- 
ernment contended, however, that the Court of 
Appeals: 


... has jurisdiction to review only a ‘‘final order” 
of the respondent AEC with regard to licenses or 
construction permits and only upon the petition of a 
‘party aggrieved,’? [8] These statutory limitations 
require a ‘‘pre- and immediate’? or ‘‘unavoidable 
threat’’ of injury. 


It was pointed out also that the only source of 
grievance was the possibility that the PRDC re- 
actor would operate in a hazardous manner. 
Since the AEC order authorized only construc- 
tion and since a future hearing, following ex- 
tensive investigation, would consider the opera- 
tion of the reactor, it was inappropriate to 
anticipate what the ultimate action would be. The 
brief by the AEC further contended that: 


The terms of the Atomic Energy Act of 1954 es- 
tablisha clear distinction between the safety consid- 
erations applicable to the two steps of the licensing 
procedure and authorize the Commission’s policy. 
Section 185 directs the issuance of construction per” 
mits without prescribing specific standards, and 
vests in the Commission broad control over subse 
quent licensing of operation. Moreover, Section 182 
explicitly conditions the licensing of operation up™ 
the public health and safety requirements applicable 
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to reactors. Thus, the mandatory effect of the Act 
is to require definitive safety findings at the oper- 
ating license stage. Reasonable safety standards 
for construction permits were left to the Commis- 
sion’s authority to make ‘‘such rules and regula- 
tions as may be necessary to carry out the purposes 
of this Act.”’ 


The U. S. Court of Appeals, in rendering its 
decision, held that the AEC was not justified, 
from a safety standpoint, in issuing a provisional 
construction permit for the plant in May 1959. 
If the decision holds, the AEC will have to sus- 
pend construction on the reactor until it can be 
shown that the project is unquestionably safe and 
that its location in a populous area is both nec- 
essary and not unnecessarily risky. The ma- 
jority opinion held that, under the Atomic En- 
ergy Law, the AEC must make a finding as to 
the safety of the plant before issuing a construc- 
tion permit. The opinion found the AEC argu- 
ments about the potential safety of the plant 
“ambiguous” and said that it had not been posi- 
tively established that such a fast breeder reac- 
tor could be operated safely. The dissenting 
opinion objected to the apparent premise of the 
majority that, “because the Commission had 
permitted millions of dollars to be invested in 
construction of the plant, the AEC would feel 
bound to permit the plant to go into operation 
[regardless of safety considerations].”’ 

(W. B. Cottrell) 


Safeguards Reports 
and Selected Reading 


The recently issued safeguards reports and 
selected literature pertaining to hazards and 
safety of reactors are listed below for refer- 
ence. Because of the similarity of many reac- 
tors (in particular, the research reactors), the 
list is not intended to be all-inclusive. 

1. H. E. Voress et al., Radioactive Fallout, a 
Bibliography of Selected USAEC Reports, USAEC 
Report TID-3087, August 1959. 

2, T. F. Davis, comp., Shipping and Storage 
of Radioactive Materials, a Literature Search, 
USAEC Report TID-3552, April 1960. 
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